last executing test programs: 24.14109317s ago: executing program 2 (id=533): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4020, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, {0x0, @core='@stats_set_aux 0 syz'}}) 24.133002285s ago: executing program 2 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x2004c000) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCSETS(r2, 0x80044704, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/216, 0xd8}], 0x1}, 0xffffffff}], 0x1, 0x2041, 0x0) 24.047598113s ago: executing program 2 (id=535): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mydev/ttyS0\x00', 0x2, 0x9) ioctl$TCSBRK(r0, 0x5409, 0x0) mkdirat(r0, &(0x7f0000000000)='./proc\x00', 0x1d8) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000000040)='./proc/net/ip_vs_conn/file0\x00', &(0x7f0000000080)='./proc/net/ip_vs_conn/file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/ip_vs_conn/file0\x00', 0x22a142, 0x130) 24.046568078s ago: executing program 2 (id=536): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x64, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xc8) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file1/file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000001580)=0x1) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000001580)=0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000001400)="0f218e6626de439c0f78e1391a66b9800000c00f326635008000000f302e0f01d166b93b06000066b891de2aed66ba000000000f30baf80c66b8442c868c66efbafc0cb80c00ef2e0f01c466b9800000c00f326635000800000f30", 0x5b}], 0x1, 0x6a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000001380)={0x100001, 0x0, {[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x80, 0xd, 0x9]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000001380)={0x100001, 0x0, {[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$bind(&(0x7f0000001240)='.\x00', &(0x7f0000001280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000001240)='.\x00', &(0x7f0000001280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000012c0)='./bus\x00', &(0x7f0000001300), 0x40, &(0x7f0000001340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 23.850056258s ago: executing program 2 (id=537): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b160008000000000000020000085800048028000180080001006f7366001c0002800800014000000004050002f500000000080003400000000110000180090001006d617371000000001c000180090001007866726d000000000c00028008000440000000010900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r4}) getpeername(r5, &(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x80) (async) getpeername(r5, &(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, &(0x7f0000000380)) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, &(0x7f0000000380)) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000440)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000640)) (async) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000640)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r14, 0x0, 0xb, 0xf0, &(0x7f0000000d80)="0ff22e7f62a59ba12fcf8b", &(0x7f0000000dc0)=""/240, 0x2, 0x0, 0x9b, 0x7c, &(0x7f0000000ec0)="a3bd3b2da21b6d3587789df7fb36e1ae0e00b4d96eb8339ff07e43e5dc68080f1a795e159b2759898ecbb70287df5b7b46de8a452c24a07e0622e6ee7ca2e9b084c0e68595151cdd777b89529aef7913cd8897c94a4bf9f57b37df0355aa3c595fb473a86fa366d707a2444e15a651190a354783432c70357c52096213bce6456367bb6048ac8de02fcd5a6553522acceb015e656eb67aedf22afb", &(0x7f0000000f80)="7fa152c0654361ffddfca3aefcdd2030ad81e2dbee1d9e643892bf9d5bb671031bdebe216df3afa0c47b1864b9249eb320f68990851a3ae7bdcc29bb506984f131392518cb1c7ae1a95e51858c22a2721b1a19ed15db13a5777219b97fb973349c0b8212997909e1a51418c687213157582f50b65f4f5d099b20c4d9", 0x0, 0x0, 0x4}, 0x50) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000680)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000e07, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x1, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000980)={0x2e, 0x2, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) connect$pppl2tp(r7, &(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, r15, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x3, 0x3}}, 0x2e) write(r2, &(0x7f0000000280)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff0000", 0xfdef) r16 = socket$unix(0x1, 0x1, 0x0) bind$unix(r16, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r16, 0x0) sendmsg$IPSET_CMD_TEST(r15, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x81502104}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xac, 0xb, 0x6, 0x5, 0x0, 0x0, {0x7819b0a19da151b2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffff801}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x30}, 0x20008081) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) (async) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) accept4$unix(r16, &(0x7f00000003c0)=@abs, 0x0, 0x0) 22.111094542s ago: executing program 2 (id=574): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e657720256372797074667320747275737465643a73797a20303030303030303030303030303030303031c03200"], 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000180), 0xca, 0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x295, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000fc0)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000002040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b4000/0x2000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0x36, &(0x7f0000002080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0x4, 0x6002c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r7 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000400)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) 22.087904471s ago: executing program 32 (id=574): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e657720256372797074667320747275737465643a73797a20303030303030303030303030303030303031c03200"], 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000180), 0xca, 0xfffffffffffffffe) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x295, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000fc0)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000002040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b4000/0x2000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0x36, &(0x7f0000002080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0x4, 0x6002c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r7 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000400)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) 11.28000623s ago: executing program 3 (id=765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) 11.27979817s ago: executing program 3 (id=766): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000001bc0)="88106f5920cc88c6edf2f74f3a0ff505683aa6adbc7b859fd4906be6d4989e4a5d66d4482644308dbbf57f40277a65d673de74d1cabf400dc1e9366c33a78560df7e6dbbf1f486ad365507931176c4f79a3489b2fdc5a3d77d5b8d1f24166ed21f1c13ff04e815ddd9af86ac737825d8fc2a3fa2ae371954629c89e8af64e8e3e3752b19fe6a6ea4d12d13ab56d860701a71bfbe817e35c77cb70b4c44d6795d5e7d931014a39299d7503aee2b83a5c1a3902e76aa5f6f83e49b9346e3bdd4b58fc6dbf3ac21ca84e8f32044ab5ad1f16f158fd797cee6899200774f1dbdacfe0b465e8003da00766a6f531eee43ec8fa629d932601987", &(0x7f0000001cc0)="512c259d738648c49b68c32474e8f3c217351139103f423d31466386c013fb4c67ba0440fc12d11d8dc07c33fd02ef7ac51d16279ab0cb7e5b6d0ab9661db30ef0332095b53cf96c211fbc79b236817ae31441347c6a8bb7df56cd652e76a1b9f9e3e369e0ae7b13c54fd143bd41a7c4e3431a572cea243a88cf08c9457f94959ea3cb02820baf"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x10005, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x40, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="030300c503b23020d5c28f60ef0000000000000013000000"], 0x14}}, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CDROMPLAYMSF(r4, 0x5303, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x6, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000015c0)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001640)='fdinfo/4\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000001ac0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000001b00)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001b40), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000001b80)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x3, 0x16, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) pread64(r7, &(0x7f0000001680)=""/17, 0x11, 0x0) fchown(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xefb8b6f4896c1fac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42, 0xc0) 11.130028184s ago: executing program 3 (id=769): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='b', 0x1, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f0000000c40)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000c80)=ANY=[], 0x0) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, r2, r2}, &(0x7f00000003c0)=""/220, 0xdc, &(0x7f00000004c0)={&(0x7f0000000500)={'sha3-224\x00'}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000030427bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="87b333fd48de734808000500", @ANYRES32=r7, @ANYBLOB="2000128009000100766c616e0000000010000280040004800600010001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000e84}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000e00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r8, &(0x7f0000000780)=ANY=[@ANYRES16=r8], 0x80) listxattr(&(0x7f0000000040)='./mnt/fillfile\x00', &(0x7f0000000080)=""/252, 0xfc) 11.060672152s ago: executing program 3 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x8000, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000010000000000000012f"], 0xffe) 10.960822858s ago: executing program 3 (id=772): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000140), 0x4) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = syz_open_dev$media(&(0x7f00000005c0), 0x3, 0x2) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000002640)={0x80000000, 0x0, &(0x7f0000002680)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000004c0)={r3, 0x0, &(0x7f0000000500)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000580)={r4, 0x0, 0x0}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0xfffffffb) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = accept4$x25(r6, &(0x7f00000000c0)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) setresuid(0x0, 0xee00, 0xee01) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./proc\x00'}, 0x18) write(r8, &(0x7f0000000300)='1', 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x14000, 0x0) read$FUSE(r8, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETOWNER(r9, 0x400454cc, r10) bind$x25(r7, &(0x7f0000000180), 0x12) listen(r6, 0x1) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050000010b007e0b0a43"], 0x97) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x388, 0x132) ptrace$pokeuser(0x6, r11, 0x388, 0xb000003) 10.881017596s ago: executing program 3 (id=775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) 7.320573637s ago: executing program 1 (id=833): r0 = userfaultfd(0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000220000000000000000000095000000000000005fef2114769174471f1ae1b2220000000000"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) write(r1, &(0x7f0000000080)='10', 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@ipv6_newroute={0x38, 0x18, 0x401, 0x70bd2a, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1, 0x2100}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}]}, 0x38}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000001240)={&(0x7f0000001200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="ebcf1c496ead389f68d5363b071ce6f27ca3bc53a56b11406a84e97bd80aaaaeb05f53b982a6872f344e01feeaa19028ef7480590248c03888ac07fac514510eb3add163e79abc92110776d1da0a0122e92dc72d", 0x54}, {&(0x7f00000001c0)="d8cd217d5003e361dac0fa057da985c462567159effb9bf7869dedb59c7645e93b", 0x21}, {&(0x7f0000000200)="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", 0x1000}], 0x4, 0x3e, 0x0, 0x80, 0x3, 0xfffffffffffffffb, 0x0, 0x7fffffff}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 7.29184242s ago: executing program 1 (id=834): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/acpi/devices/PNP0A08:00/uid\x00', 0x0, 0x0) read(r0, &(0x7f0000000440)=""/256, 0x100) (async) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r1, &(0x7f0000000540)={0x4, 0x1, 0x0, 0x0, 0x1faa7e52, 0x8, 0xe, 0x5, 0x2}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.159961852s ago: executing program 1 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4d088}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='batadv0\x00', 0x20002, &(0x7f0000000100)={@_ha_fsid={[0x1c000]}, {0x2, 0x4, 0x5, 0xcf}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x7}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x40000000, 0x1c, 0x3, 0x1, 0x6]}, &(0x7f0000000280)=0x54) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4d088}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='batadv0\x00', 0x20002, &(0x7f0000000100)={@_ha_fsid={[0x1c000]}, {0x2, 0x4, 0x5, 0xcf}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x7}) (async) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x40000000, 0x1c, 0x3, 0x1, 0x6]}, &(0x7f0000000280)=0x54) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) 7.158314074s ago: executing program 1 (id=836): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) inotify_init1(0x0) (async) r1 = inotify_init1(0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) (async) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) inotify_add_watch(r1, &(0x7f0000000200)='./file1\x00', 0xc0000cc5) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x1000) r3 = socket$kcm(0x21, 0x2, 0x2) recvfrom(r2, &(0x7f0000000900)=""/121, 0x79, 0x0, &(0x7f0000000980)=@in6={0xa, 0x4e24, 0x2, @private2, 0xffffffc0}, 0x80) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000ffff003fd31340e92c4bb8c25b566ea7cba890e75cd35e4d60bd060deff25ad25de760077d5308e2ad17ec74b971d2a3e650531402e8cff71438e256e14370bdb12e03bfc86f5565ab24bcaeace7aef6de5b81bee08d849472abf290f658c51ff2b6fe71c9681d25e47dc25e922b48cff615ee01887dfd610412124cc3dd30ad2169a2f86d449354807996215e48174e5d2214dbb669f487968ccbf3ebcaae96eb0e48457bf2f8de79e8fe0bdfcbe947a6d3b54715b38929707e32cbea361720c71183893934ed96"], 0x48}, 0x300}, 0x805) (async) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000ffff003fd31340e92c4bb8c25b566ea7cba890e75cd35e4d60bd060deff25ad25de760077d5308e2ad17ec74b971d2a3e650531402e8cff71438e256e14370bdb12e03bfc86f5565ab24bcaeace7aef6de5b81bee08d849472abf290f658c51ff2b6fe71c9681d25e47dc25e922b48cff615ee01887dfd610412124cc3dd30ad2169a2f86d449354807996215e48174e5d2214dbb669f487968ccbf3ebcaae96eb0e48457bf2f8de79e8fe0bdfcbe947a6d3b54715b38929707e32cbea361720c71183893934ed96"], 0x48}, 0x300}, 0x805) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002000000030000200a6300006f31567431e006e15807a65b78f322907164de2aedb90f8f42ef79d9406ae1efa92e5d8229ac6368c4769c29008628a1268abbd8e324f03228360b7c0ced1fdc"], 0x80}, 0x300, 0x0, 0x0, 0xc400}, 0x40010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000e00)={0xa, 0x4e24, 0xfffffffc, @local, 0x30}, 0x1c, 0x0}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r10, @ANYBLOB="042213000a00060008021100000100000600100080050000060012000000006e2662a3000c00ac00c0d2c68fd9778d99"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r10, @ANYBLOB="042213000a00060008021100000100000600100080050000060012000000006e2662a3000c00ac00c0d2c68fd9778d99"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2100500}, 0xc, &(0x7f0000000d40)={&(0x7f0000000e40)=ANY=[@ANYBLOB="7800000053922aca2edb68fbf11f89121671eb1eb6884fb445e2518868417479b192fb570b06f4c0fef2f05027894a7e18d9af29cd7fb11b70f3c58865ea06de34e1d0ec37eb7d107988c25034ecc59a94ee905fea8f477062e7f18e8c828d803d328b85747b19fd76e1c338fbe900964331648c84a16c5d480673f474bec5eba028797b", @ANYRES16=r9, @ANYBLOB="000327bd7000fcdbdf253d00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900553100000300000008005d000000000008005d000000000008005d000000000008005d000000000008005d000100000008005d000100000008005d000100000008005d000000000008005d000000000008005d0000000000"], 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r12 = accept4(r6, 0x0, 0x0, 0x80000) ioctl$int_in(r12, 0x5452, &(0x7f00000003c0)=0xd) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r12) sendmsg$nl_xfrm(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="58000000f3000100000003000000df25e000001100000000000000000000000000000000000000e66252ecfe83000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f0002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) 6.239616007s ago: executing program 1 (id=844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff56, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="d8b375dab4246c72f31ed5694ef82e14bc3c0bd129ce7c80e422ee0ee4953675b7f77ff9aa32df45a49b9330a7a3bc70cad88cde8af52166572906f584bc126bc7e565e6ce9d0bb9c45816fbe66fa5f2c276a72c5031f27f96ae1564ee4d484b7a38ea4e5e31fc42e68014340943cd30427e388822671236d8db8c9b9d0cbeeacea92077000ac4c7e8706ea3ce0173301d3b316159b06cac7777cbc2d5e1ad2a37bb9f95ec404a100f0f1247750e2c56c95b78754e777d7e25b7d06f326491c66866c1611e8a", @ANYRES64=r0], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x4004000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={0xffffffffffffffff, r1}, 0xfffffe53) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000840)='./mnt\x00', &(0x7f00000008c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000900)='./mnt\x00') mkdir(&(0x7f0000000940)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000980)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000a40)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000a80)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000b00)='./file1\x00', 0x800, 0x1) r5 = open(&(0x7f0000000b40)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000b80)='./bus\x00') linkat(r5, &(0x7f0000000bc0)='./file1\x00', r5, &(0x7f0000000c00)='./file0\x00', 0x1000) rename(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file1\x00') 6.237131884s ago: executing program 1 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x8) close(0x3) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x0, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000300)="01020304", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 2.59088471s ago: executing program 4 (id=872): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (rerun: 64) pwrite64(r1, &(0x7f0000000080)="0000010042", 0x5, 0x1be) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) (async) keyctl$clear(0x3, 0xfffffffffffffffd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf2501000000000000000b00000000140014627240e8646361ab5a73742d6c696e6b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) (async) shutdown(r4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000120000000800080000e100000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) pwrite64(r1, &(0x7f0000000100)="55aa", 0x2, 0x1fe) (async) pwrite64(r1, &(0x7f00000001c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r1, &(0x7f0000000200)='P', 0x1, 0x1e8000) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x202) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000980)={0x0, 0x6, 0x1, 'queue1\x00', 0x5}) r9 = fsopen(&(0x7f00000007c0)='exfat\x00', 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) statx(r10, 0x0, 0x1000, 0x10, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000800)='uid', &(0x7f0000000840)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) ioctl$LOOP_SET_FD(r8, 0x4c00, r1) (async) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff7bfffffffeffffff00000000", @ANYRES32=0x0, @ANYBLOB="2010000000817461700000280010004e2000000600020003000023a2222d45e42a0006000e000000000006"], 0x58}}, 0x40804) 1.721501731s ago: executing program 4 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioperm(0x100, 0x2, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x5, 0x1, 0x80}, {0xd, 0xdc, 0x10, 0x2}, {0x2, 0x3, 0x10, 0x7}]}) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) flock(r2, 0x2) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075", @ANYRESDEC=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000001900)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000001980), &(0x7f00000019c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) prctl$PR_SET_MM(0x41555856, 0x863f4ab1f1b106b1, &(0x7f0000af2000/0x3000)=nil) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioperm(0x100, 0x2, 0x20) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x5, 0x1, 0x80}, {0xd, 0xdc, 0x10, 0x2}, {0x2, 0x3, 0x10, 0x7}]}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) flock(r2, 0x2) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075", @ANYRESDEC=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0xfffffffffffffe89}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000001900)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000001980), &(0x7f00000019c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) (async) prctl$PR_SET_MM(0x41555856, 0x863f4ab1f1b106b1, &(0x7f0000af2000/0x3000)=nil) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) 1.5998426s ago: executing program 4 (id=874): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000280)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f00000002c0)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000300)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000440)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x202) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 1.521138465s ago: executing program 4 (id=875): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/185, &(0x7f00000003c0)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000480)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000004c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 659.571294ms ago: executing program 4 (id=877): mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x1, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f00000005c0)={0x200, 0xb, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000600)={0x4000, r0}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000600)={0x4000, r0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f0000000440)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000a0008048100020000000800040041000000", 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001010000000000000040000085000000d000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001010000000000000040000085000000d000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r4}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r5, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0xb, 0x81000000, 0x6, 0x5]}, &(0x7f00000000c0)=0x54) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000a00), &(0x7f0000000a40)={'L-', 0x7}, 0x16, 0x3) mount(&(0x7f0000000640)=@sg0, &(0x7f0000000680)='./cgroup\x00', &(0x7f00000006c0)='ntfs3\x00', 0x2200010, &(0x7f0000000700)='discard') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e00)={r4, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80)=[0x19e, 0x8, 0x20000006, 0x52, 0x5, 0x4, 0x2fe8, 0x5], &(0x7f0000000dc0)=[0x1, 0x0, 0x0, 0x2, 0x1, 0x4], 0x40, 0x8}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e00)={r4, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80)=[0x19e, 0x8, 0x20000006, 0x52, 0x5, 0x4, 0x2fe8, 0x5], &(0x7f0000000dc0)=[0x1, 0x0, 0x0, 0x2, 0x1, 0x4], 0x40, 0x8}}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x102, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x48000) syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') write$vhost_msg(r7, &(0x7f00000004c0)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) (async) write$vhost_msg(r7, &(0x7f00000004c0)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a80)=[{{&(0x7f0000000b00)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b80)="e2", 0x1}], 0x1}}, {{&(0x7f0000000bc0)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000c40)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000c80)={0x0, 0x8}, &(0x7f0000000cc0)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000c80)={0x0, 0x8}, &(0x7f0000000cc0)=0x8) syz_clone3(&(0x7f00000001c0)={0x4004080, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xb0) 580.747201ms ago: executing program 4 (id=878): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@setneightbl={0x34, 0x43, 0x1, 0x2, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY={0xc, 0x13, 0xce04}]}]}, 0x34}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, &(0x7f00000000c0)=0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) setns(0xc9, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@setneightbl={0x34, 0x43, 0x1, 0x2, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY={0xc, 0x13, 0xce04}]}]}, 0x34}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) (async) ioctl$EVIOCRMFF(r1, 0x83c0550b, &(0x7f00000000c0)=0x1) (async) 410.914983ms ago: executing program 0 (id=881): setns(0xc9, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xb, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x114000140) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x7, 0x40, 0x10001, 0x1, 0x3, 0x10, 0x5, 0x9]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x4500) creat(&(0x7f00000002c0)='./file0\x00', 0x104) 356.906512ms ago: executing program 0 (id=882): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0xb, 0xff, 0x6, 0x3, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_sec_ctx={0x1, 0x18, 0x7}]}, 0x18}}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="6400000010000106000000000000009407000000000000000000000000000000100003007665746830000000000000002400120008000100766574681800020014000100000000007fff0000feffff7f0000000010000300766574685900000000000000", 0x64}], 0x1}, 0x400400c) capset(&(0x7f0000000e00)={0x20071026}, &(0x7f0000000e40)={0x200006, 0x200003, 0x801, 0x4, 0x7, 0x4}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000200)) acct(&(0x7f0000000040)='./file0\x00') acct(&(0x7f0000000080)='./file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x0) 270.251886ms ago: executing program 0 (id=883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000280)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f00000002c0)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000300)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000440)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x202) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 116.347895ms ago: executing program 0 (id=884): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="bfa20000000000008df3bdedd66af49c937b296efd1e0cc4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000040)={0x4a, "1a1287b524d01b049919d1b36d84be613b0dbb0dcf2e9f91e72a80689ff63ccdedd01b27341c8fd96ca7276b68773fd040fba8b3cfd1e35360ceb9e5ea9f961bf03be0c1d3ab31ca1b36d980459aa777319d826c5c1c14bbdcec89fbf712621638c9e0456512aff299e4db8edb5bcaf3431d7526d365b08aa83986fc16ea6920"}) 115.980794ms ago: executing program 0 (id=885): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='b', 0x1, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @link_local}, 0x14) bind$packet(r1, &(0x7f0000000c40)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000c80)=ANY=[], 0x0) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, r2, r2}, &(0x7f00000003c0)=""/220, 0xdc, &(0x7f00000004c0)={&(0x7f0000000500)={'sha3-224\x00'}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000e00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='jffs2\x00', 0x0, 0x0) listxattr(&(0x7f0000000040)='./mnt/fillfile\x00', &(0x7f0000000080)=""/252, 0xfc) 0s ago: executing program 0 (id=886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x2f) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x1000, 0xffff, 0x0, 0xa}, {0x10000000000, 0x0, 0x200, 0x0, 0x9, 0x1}, {0xfffffffffffffffe, 0x1, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x0, 0x3, 0xe7, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0xffff, @private0, 0x1}, 0x1c) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a40), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) r6 = dup(r5) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 64) write$UHID_INPUT(r6, &(0x7f0000000a80)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) recvmsg$unix(r6, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001ac0)=""/206, 0xce}, {&(0x7f0000001bc0)=""/30, 0x1e}, {&(0x7f0000001c00)=""/26, 0x1a}, {&(0x7f0000001c40)=""/4, 0x4}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000001f80)=""/261, 0x105}], 0x6, &(0x7f0000002d40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x10022) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c80)=ANY=[@ANYBLOB="2c0000f32e0fd03700", @ANYRES16=r7, @ANYBLOB="0100000000000000000027000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x20000040) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000900)={0x1d, r9}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x388}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e80)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b000000000010001a800c000a80050009"], 0x40}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000200)={0x170003, 0x0, {[0xfffffffffffffffe, 0x8, 0x0, 0x4, 0x800007, 0xe, 0x27b6, 0x5]}}) (rerun: 64) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) (rerun: 32) kernel console output (not intermixed with test programs): 6d0 [ 60.933283][ T7077] ? sctp_add_bind_addr+0xae/0x3e0 [ 60.933299][ T7077] sctp_add_bind_addr+0xae/0x3e0 [ 60.933312][ T7077] sctp_copy_local_addr_list+0x349/0x550 [ 60.933329][ T7077] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 60.933345][ T7077] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 60.933360][ T7077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.933379][ T7077] sctp_bind_addr_copy+0xe0/0x530 [ 60.933395][ T7077] sctp_connect_new_asoc+0x1c9/0x770 [ 60.933414][ T7077] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 60.933433][ T7077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.933452][ T7077] __sctp_connect+0x3e7/0xc70 [ 60.933469][ T7077] ? lock_acquire+0x1d1/0x380 [ 60.933484][ T7077] ? __pfx___sctp_connect+0x10/0x10 [ 60.933504][ T7077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.933521][ T7077] sctp_inet_connect+0x15f/0x220 [ 60.933539][ T7077] __sys_connect_file+0x146/0x1a0 [ 60.933556][ T7077] __sys_connect+0x141/0x170 [ 60.933571][ T7077] ? __pfx___sys_connect+0x10/0x10 [ 60.933585][ T7077] ? __fget_files+0x21f/0x3d0 [ 60.933607][ T7077] ? __pfx_ksys_write+0x10/0x10 [ 60.933624][ T7077] __x64_sys_connect+0x72/0xb0 [ 60.933638][ T7077] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.933668][ T7077] do_syscall_64+0x123/0x790 [ 60.933686][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.933697][ T7077] RIP: 0033:0x7f41d539f559 [ 60.933707][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.933717][ T7077] RSP: 002b:00007f41d61bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.933729][ T7077] RAX: ffffffffffffffda RBX: 00007f41d5625fa0 RCX: 00007f41d539f559 [ 60.933736][ T7077] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 60.933742][ T7077] RBP: 00007f41d61bd090 R08: 0000000000000000 R09: 0000000000000000 [ 60.933749][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.933755][ T7077] R13: 00007f41d5626038 R14: 00007f41d5625fa0 R15: 00007ffd00e38ad8 [ 60.933771][ T7077] [ 61.034886][ T1966] usb 6-1: USB disconnect, device number 5 [ 61.047407][ T1966] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 61.048079][ T1966] metro_usb 6-1:1.0: device disconnected [ 61.090748][ T7087] kvm: user requested TSC rate below hardware speed [ 61.098787][ T7087] FAULT_INJECTION: forcing a failure. [ 61.098787][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 61.098814][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 61.098832][ T7087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.098841][ T7087] Call Trace: [ 61.098846][ T7087] [ 61.098852][ T7087] dump_stack_lvl+0x100/0x190 [ 61.098887][ T7087] should_fail_ex.cold+0x5/0xa [ 61.098911][ T7087] should_failslab+0xc2/0x120 [ 61.098953][ T7087] __kmalloc_noprof+0xfc/0x840 [ 61.098973][ T7087] ? __register_sysctl_table+0xac/0x1650 [ 61.098996][ T7087] __register_sysctl_table+0xac/0x1650 [ 61.099015][ T7087] ? lock_acquire+0x1d1/0x380 [ 61.099036][ T7087] ? __pfx___register_sysctl_table+0x10/0x10 [ 61.099053][ T7087] ? is_module_address+0x5f/0xf0 [ 61.099074][ T7087] ? is_module_address+0x5f/0xf0 [ 61.099099][ T7087] register_net_sysctl_sz+0x325/0x420 [ 61.099121][ T7087] __devinet_sysctl_register+0x1b9/0x360 [ 61.099147][ T7087] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 61.099172][ T7087] ? __asan_memcpy+0x3c/0x60 [ 61.099189][ T7087] devinet_init_net+0x334/0x8d0 [ 61.099209][ T7087] ? __pfx_arp_net_init+0x10/0x10 [ 61.099222][ T7087] ? __pfx_devinet_init_net+0x10/0x10 [ 61.099243][ T7087] ops_init+0x1e2/0x5f0 [ 61.099261][ T7087] setup_net+0x118/0x3a0 [ 61.099278][ T7087] ? __pfx_setup_net+0x10/0x10 [ 61.099294][ T7087] ? bpf_lsm_namespace_init+0x9/0x10 [ 61.099319][ T7087] copy_net_ns+0x340/0x7a0 [ 61.099338][ T7087] create_new_namespaces+0x3ea/0xac0 [ 61.099361][ T7087] copy_namespaces+0x468/0x5e0 [ 61.099380][ T7087] copy_process+0x39dc/0x84c0 [ 61.099410][ T7087] ? __pfx_copy_process+0x10/0x10 [ 61.099425][ T7087] ? futex_wake+0x4ea/0x5e0 [ 61.099451][ T7087] kernel_clone+0x176/0x9d0 [ 61.099468][ T7087] ? __pfx_kernel_clone+0x10/0x10 [ 61.099495][ T7087] __do_sys_clone+0xd9/0x120 [ 61.099511][ T7087] ? __pfx___do_sys_clone+0x10/0x10 [ 61.099545][ T7087] do_syscall_64+0x123/0x790 [ 61.099568][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.099583][ T7087] RIP: 0033:0x7f41d539f559 [ 61.099595][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.099609][ T7087] RSP: 002b:00007f41d61bcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 61.099625][ T7087] RAX: ffffffffffffffda RBX: 00007f41d5625fa0 RCX: 00007f41d539f559 [ 61.099635][ T7087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 61.099646][ T7087] RBP: 00007f41d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.099654][ T7087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.099663][ T7087] R13: 00007f41d5626038 R14: 00007f41d5625fa0 R15: 00007ffd00e38ad8 [ 61.099685][ T7087] [ 61.350829][ T7092] loop0: detected capacity change from 0 to 3904 [ 61.397874][ T7092] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 61.397900][ T7092] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 61.397944][ T7092] loop0: [ 61.635620][ T7109] FAULT_INJECTION: forcing a failure. [ 61.635620][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 61.635649][ T7109] CPU: 3 UID: 0 PID: 7109 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) [ 61.635668][ T7109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.635677][ T7109] Call Trace: [ 61.635684][ T7109] [ 61.635691][ T7109] dump_stack_lvl+0x100/0x190 [ 61.635721][ T7109] should_fail_ex.cold+0x5/0xa [ 61.635745][ T7109] should_failslab+0xc2/0x120 [ 61.635769][ T7109] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.635786][ T7109] ? sget_fc+0x117/0x1f60 [ 61.635805][ T7109] ? sget_fc+0x1ba/0x1f60 [ 61.635827][ T7109] ? __pfx_rpc_fill_super+0x10/0x10 [ 61.635846][ T7109] sget_fc+0x1ba/0x1f60 [ 61.635864][ T7109] ? __pfx_test_keyed_super+0x10/0x10 [ 61.635882][ T7109] ? cred_has_capability.isra.0+0x186/0x300 [ 61.635905][ T7109] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 61.635925][ T7109] ? __pfx_set_anon_super_fc+0x10/0x10 [ 61.635950][ T7109] ? __pfx_sget_fc+0x10/0x10 [ 61.635967][ T7109] ? hook_capable+0x1bc/0x500 [ 61.635993][ T7109] ? rcu_is_watching+0x13/0xc0 [ 61.636010][ T7109] ? cap_capable+0x107/0x430 [ 61.636033][ T7109] ? __pfx_rpc_fill_super+0x10/0x10 [ 61.636052][ T7109] get_tree_keyed+0x59/0x1d0 [ 61.636074][ T7109] vfs_get_tree+0x92/0x320 [ 61.636091][ T7109] vfs_cmd_create+0xd7/0x2a0 [ 61.636114][ T7109] __do_sys_fsconfig+0x55a/0xcb0 [ 61.636137][ T7109] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 61.636168][ T7109] do_syscall_64+0x123/0x790 [ 61.636194][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.636212][ T7109] RIP: 0033:0x7f7a52f9f559 [ 61.636226][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.636241][ T7109] RSP: 002b:00007f7a53ebb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 61.636258][ T7109] RAX: ffffffffffffffda RBX: 00007f7a53225fa0 RCX: 00007f7a52f9f559 [ 61.636269][ T7109] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000f [ 61.636278][ T7109] RBP: 00007f7a53036b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.636288][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.636298][ T7109] R13: 00007f7a53226038 R14: 00007f7a53225fa0 R15: 00007fff2ad43c48 [ 61.636317][ T7109] [ 61.649237][ T5786] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 61.664697][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.739802][ T7119] loop0: detected capacity change from 0 to 3904 [ 61.786781][ T7119] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 61.786806][ T7119] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 61.786849][ T7119] loop0: [ 61.823442][ T7121] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 61.824100][ T7121] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 61.871125][ T7123] lo: entered promiscuous mode [ 61.874392][ T7123] bond0: entered promiscuous mode [ 61.874706][ T7123] dummy0: entered promiscuous mode [ 61.875725][ T7123] eql: entered promiscuous mode [ 61.875908][ T7123] ifb0: entered promiscuous mode [ 61.876164][ T7123] ifb1: entered promiscuous mode [ 61.879613][ T7123] e1000 0000:00:07.0 eth0: entered promiscuous mode [ 61.890422][ T7123] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 61.892909][ T7123] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 61.893225][ T7123] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 61.894448][ T7123] hwsim0: entered promiscuous mode [ 61.895433][ T7123] ieee802154 phy0 wpan0: entered promiscuous mode [ 61.895583][ T7123] ieee802154 phy1 wpan1: entered promiscuous mode [ 61.895753][ T7123] teql0: entered promiscuous mode [ 61.895767][ T7123] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 62.002785][ T7129] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 62.002800][ T7129] netlink: 228 bytes leftover after parsing attributes in process `syz.2.408'. [ 62.110641][ T7134] (syz.2.410,7134,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 62.110662][ T7134] (syz.2.410,7134,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 62.145447][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 62.145510][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 62.146922][ T5782] Bluetooth: hci3: hardware error 0x00 [ 62.158537][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 62.158548][ T42] audit: type=1400 audit(1793024815.965:509): avc: denied { map } for pid=7135 comm="syz.2.411" path="socket:[15070]" dev="sockfs" ino=15070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.158966][ T42] audit: type=1400 audit(1793024815.965:510): avc: denied { read } for pid=7135 comm="syz.2.411" path="socket:[15070]" dev="sockfs" ino=15070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.205726][ T7140] loop0: detected capacity change from 0 to 3904 [ 62.278998][ T7140] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 62.279014][ T7140] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 62.279041][ T7140] loop0: [ 62.373829][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.909590][ T7151] netlink: 'syz.0.413': attribute type 2 has an invalid length. [ 62.910209][ T7151] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 62.911558][ T42] audit: type=1400 audit(1793024816.715:511): avc: denied { ioctl } for pid=7144 comm="syz.2.415" path="socket:[16073]" dev="sockfs" ino=16073 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.916721][ T7145] overlay: filesystem on ./file0 not supported as upperdir [ 63.034968][ T7181] loop0: detected capacity change from 0 to 3904 [ 63.099374][ T7181] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 63.099397][ T7181] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 63.099437][ T7181] loop0: [ 63.245311][ T7192] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 63.245914][ T7192] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 63.259132][ T42] audit: type=1400 audit(1793024817.065:512): avc: denied { map } for pid=7189 comm="syz.3.424" path="pipe:[17111]" dev="pipefs" ino=17111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.265461][ T7190] Mount JFS Failure: -22 [ 63.265475][ T7190] jfs_mount failed w/return code = -22 [ 63.375247][ T7206] xt_LOG: level 127 >= 8 [ 63.390212][ T7206] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 63.392457][ T7211] ip_tables: iptables: counters copy to user failed while replacing table [ 63.621424][ T7230] loop0: detected capacity change from 0 to 3904 [ 63.664658][ T7230] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 63.664684][ T7230] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 63.664731][ T7230] loop0: [ 63.707441][ T7236] netlink: 'syz.3.438': attribute type 2 has an invalid length. [ 63.708000][ T7236] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 63.998879][ T42] audit: type=1400 audit(1793024817.805:513): avc: denied { create } for pid=7250 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.016521][ T42] audit: type=1400 audit(1793024817.825:514): avc: denied { ioctl } for pid=7250 comm="syz.3.445" path="socket:[17216]" dev="sockfs" ino=17216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.066540][ T7256] IPVS: nq: TCP 127.0.0.1:5376 - no destination available [ 64.073023][ T6489] IPVS: starting estimator thread 0... [ 64.115308][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 64.115324][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 64.115349][ T5192] loop0: [ 64.131048][ T7262] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 64.152765][ T7264] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 64.163779][ T7260] IPVS: using max 43 ests per chain, 103200 per kthread [ 64.172542][ T42] audit: type=1400 audit(1793024817.975:515): avc: denied { write } for pid=7265 comm="syz.0.450" name="/" dev="9p" ino=71827721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.174594][ T42] audit: type=1400 audit(1793024817.975:516): avc: denied { remove_name } for pid=7265 comm="syz.0.450" name="file0" dev="9p" ino=71827769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.174621][ T42] audit: type=1400 audit(1793024817.975:517): avc: denied { unlink } for pid=7265 comm="syz.0.450" name="file0" dev="9p" ino=71827769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.179597][ T42] audit: type=1400 audit(1793024817.985:518): avc: denied { write } for pid=7265 comm="syz.0.450" name="/" dev="9p" ino=71827721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.180082][ T7267] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 64.182439][ T7266] netfs: Duplicate cookie detected [ 64.182447][ T7266] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 64.182456][ T7266] netfs: O-cookie V=00000002 [9p,syz,] [ 64.182461][ T7266] netfs: O-key=[8] '4b01480400000000' [ 64.182468][ T7266] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 64.182476][ T7266] netfs: N-cookie V=00000002 [9p,syz,] [ 64.182481][ T7266] netfs: N-key=[8] '4b01480400000000' [ 64.223826][ T5782] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 64.263518][ T7274] jffs2: notice: (7274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 64.274915][ T7274] netlink: 80 bytes leftover after parsing attributes in process `syz.2.453'. [ 64.406341][ T7286] loop0: detected capacity change from 0 to 3904 [ 64.456348][ T7286] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 64.456364][ T7286] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 64.456390][ T7286] loop0: [ 64.466750][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.631061][ T5823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.658720][ T7291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 64.712660][ T5823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.778188][ T5823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.783474][ T7316] kvm: pic: single mode not supported [ 64.784477][ T7316] kvm: pic: non byte read [ 64.798729][ T7289] cgroup: fork rejected by pids controller in /syz1 [ 64.800475][ T7316] kvm: pic: non byte read [ 64.801495][ T7316] kvm: pic: non byte read [ 64.802524][ T7316] kvm: pic: non byte read [ 64.803627][ T7316] kvm: pic: non byte read [ 64.804790][ T7316] kvm: pic: non byte read [ 64.864207][ T5823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.028872][ T5823] bridge_slave_1: left allmulticast mode [ 65.028912][ T5823] bridge_slave_1: left promiscuous mode [ 65.029919][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.042260][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.044368][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.046824][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.048754][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.050973][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.059684][ T5823] bridge_slave_0: left allmulticast mode [ 65.059701][ T5823] bridge_slave_0: left promiscuous mode [ 65.059836][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.085863][ T5823] batman_adv: batadv0: Interface deactivated: gretap1 [ 65.150452][ T5823] ip6gretap0 (unregistering): left promiscuous mode [ 65.180689][ T5823] batman_adv: batadv0: Removing interface: gretap1 [ 65.213474][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.222639][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.223586][ T5823] bond0 (unregistering): Released all slaves [ 65.241376][ T5495] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.294065][ T5823] tipc: Left network mode [ 65.389900][ T7381] ubi0: attaching mtd0 [ 65.390738][ T7381] ubi0: scanning is finished [ 65.390791][ T7381] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 65.421442][ T5495] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.439870][ T7344] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.460956][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 65.550095][ T7381] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 65.662722][ T7399] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 65.716288][ T5495] 8021q: adding VLAN 0 to HW filter on device eth4 [ 65.812941][ T5823] batadv0: left promiscuous mode [ 65.832021][ T5823] hsr_slave_0: left promiscuous mode [ 65.833404][ T5823] hsr_slave_1: left promiscuous mode [ 65.835147][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.835159][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.836425][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.836435][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.850943][ T5823] veth1_macvtap: left promiscuous mode [ 65.850973][ T5823] veth0_macvtap: left promiscuous mode [ 65.851070][ T5823] veth1_vlan: left promiscuous mode [ 65.851106][ T5823] veth0_vlan: left promiscuous mode [ 66.000904][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 66.020906][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 66.116184][ T5495] 8021q: adding VLAN 0 to HW filter on device eth5 [ 66.168323][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.168396][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.168484][ T7344] bridge_slave_0: entered allmulticast mode [ 66.182330][ T7344] bridge_slave_0: entered promiscuous mode [ 66.184186][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.184254][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.184340][ T7344] bridge_slave_1: entered allmulticast mode [ 66.197885][ T7344] bridge_slave_1: entered promiscuous mode [ 66.255860][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.270001][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.303606][ T7344] team0: Port device team_slave_0 added [ 66.322638][ T7344] team0: Port device team_slave_1 added [ 66.342606][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.342618][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.342631][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.343467][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.343475][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.343488][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.378929][ T7344] hsr_slave_0: entered promiscuous mode [ 66.379635][ T7344] hsr_slave_1: entered promiscuous mode [ 66.380207][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 66.380226][ T7344] Cannot create hsr debugfs directory [ 66.720102][ T7459] FAULT_INJECTION: forcing a failure. [ 66.720102][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 66.720125][ T7459] CPU: 0 UID: 0 PID: 7459 Comm: syz.1.481 Tainted: G Y syzkaller #0 PREEMPT(full) [ 66.720140][ T7459] Tainted: [Y]=FORCED_BIND [ 66.720144][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.720151][ T7459] Call Trace: [ 66.720155][ T7459] [ 66.720159][ T7459] dump_stack_lvl+0x100/0x190 [ 66.720201][ T7459] should_fail_ex.cold+0x5/0xa [ 66.720218][ T7459] should_failslab+0xc2/0x120 [ 66.720234][ T7459] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.720246][ T7459] ? sctp_add_bind_addr+0xae/0x3e0 [ 66.720277][ T7459] sctp_add_bind_addr+0xae/0x3e0 [ 66.720291][ T7459] sctp_copy_local_addr_list+0x349/0x550 [ 66.720307][ T7459] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 66.720323][ T7459] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 66.720338][ T7459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.720357][ T7459] sctp_bind_addr_copy+0xe0/0x530 [ 66.720372][ T7459] sctp_connect_new_asoc+0x1c9/0x770 [ 66.720390][ T7459] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 66.720409][ T7459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.720428][ T7459] __sctp_connect+0x3e7/0xc70 [ 66.720445][ T7459] ? lock_acquire+0x1d1/0x380 [ 66.720461][ T7459] ? __pfx___sctp_connect+0x10/0x10 [ 66.720480][ T7459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.720498][ T7459] sctp_inet_connect+0x15f/0x220 [ 66.720515][ T7459] __sys_connect_file+0x146/0x1a0 [ 66.720534][ T7459] __sys_connect+0x141/0x170 [ 66.720549][ T7459] ? __pfx___sys_connect+0x10/0x10 [ 66.720563][ T7459] ? __fget_files+0x21f/0x3d0 [ 66.720584][ T7459] ? __pfx_ksys_write+0x10/0x10 [ 66.720601][ T7459] __x64_sys_connect+0x72/0xb0 [ 66.720616][ T7459] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.720633][ T7459] do_syscall_64+0x123/0x790 [ 66.720651][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.720663][ T7459] RIP: 0033:0x7f0dd9b9f559 [ 66.720673][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.720684][ T7459] RSP: 002b:00007f0dd7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 66.720696][ T7459] RAX: ffffffffffffffda RBX: 00007f0dd9e25fa0 RCX: 00007f0dd9b9f559 [ 66.720703][ T7459] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 66.720710][ T7459] RBP: 00007f0dd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.720717][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.720724][ T7459] R13: 00007f0dd9e26038 R14: 00007f0dd9e25fa0 R15: 00007ffe7687ec78 [ 66.720739][ T7459] [ 66.980170][ T7344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.982182][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.982548][ T7344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.990893][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.991322][ T7344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.995982][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.000630][ T7344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.004543][ T7344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.052765][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.062085][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.066298][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.066345][ T6489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.070383][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.070432][ T6489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.093802][ T5782] Bluetooth: hci3: command tx timeout [ 67.110294][ T7487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.164734][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 67.164747][ T42] audit: type=1400 audit(1793024820.975:562): avc: denied { read } for pid=7486 comm="syz.3.484" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.168450][ T42] audit: type=1400 audit(1793024820.975:563): avc: denied { open } for pid=7486 comm="syz.3.484" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.171344][ T42] audit: type=1400 audit(1793024820.975:564): avc: denied { ioctl } for pid=7486 comm="syz.3.484" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.213415][ T42] audit: type=1400 audit(1793024821.015:565): avc: denied { create } for pid=7496 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.222794][ T42] audit: type=1400 audit(1793024821.025:566): avc: denied { write } for pid=7495 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.225247][ T42] audit: type=1400 audit(1793024821.035:567): avc: denied { read } for pid=7496 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.225676][ T42] audit: type=1400 audit(1793024821.035:568): avc: denied { ioctl } for pid=7496 comm="syz.3.485" path="socket:[17655]" dev="sockfs" ino=17655 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.321260][ T42] audit: type=1400 audit(1793024821.125:569): avc: denied { write } for pid=7502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.376184][ T42] audit: type=1400 audit(1793024821.185:570): avc: denied { write } for pid=7514 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.386481][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.432733][ T7344] veth0_vlan: entered promiscuous mode [ 67.439162][ T7344] veth1_vlan: entered promiscuous mode [ 67.463026][ T42] audit: type=1400 audit(1793024821.265:571): avc: denied { mounton } for pid=7525 comm="syz.3.492" path="/102/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 67.466886][ T7344] veth0_macvtap: entered promiscuous mode [ 67.472730][ T7344] veth1_macvtap: entered promiscuous mode [ 67.490313][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.499695][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.510856][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.511469][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.511589][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.545734][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.598032][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.598046][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.620121][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.620142][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.732215][ T7549] loop0: detected capacity change from 0 to 3904 [ 67.758128][ T7549] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 67.758149][ T7549] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 67.758183][ T7549] loop0: [ 67.845878][ T7558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 67.891623][ T7565] Config c/1 of g1 needs at least one function. [ 67.891763][ T7565] udc dummy_udc.0: failed to start g1: -22 [ 67.891775][ T7565] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 67.901407][ T7565] UDC core: g1: couldn't find an available UDC or it's busy [ 68.198729][ T7588] loop0: detected capacity change from 0 to 3904 [ 68.235031][ T7588] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 68.235047][ T7588] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 68.235072][ T7588] loop0: [ 68.261079][ T7590] cgroup: noprefix used incorrectly [ 68.316654][ T7596] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 68.317007][ T7596] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 68.339390][ T7600] FAULT_INJECTION: forcing a failure. [ 68.339390][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 68.339417][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.3.511 Tainted: G Y syzkaller #0 PREEMPT(full) [ 68.339436][ T7600] Tainted: [Y]=FORCED_BIND [ 68.339440][ T7600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.339446][ T7600] Call Trace: [ 68.339450][ T7600] [ 68.339455][ T7600] dump_stack_lvl+0x100/0x190 [ 68.339475][ T7600] should_fail_ex.cold+0x5/0xa [ 68.339492][ T7600] should_failslab+0xc2/0x120 [ 68.339507][ T7600] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.339519][ T7600] ? sctp_add_bind_addr+0xae/0x3e0 [ 68.339534][ T7600] sctp_add_bind_addr+0xae/0x3e0 [ 68.339548][ T7600] sctp_copy_local_addr_list+0x349/0x550 [ 68.339565][ T7600] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 68.339581][ T7600] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 68.339597][ T7600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.339615][ T7600] sctp_bind_addr_copy+0xe0/0x530 [ 68.339630][ T7600] sctp_connect_new_asoc+0x1c9/0x770 [ 68.339648][ T7600] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 68.339666][ T7600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.339685][ T7600] __sctp_connect+0x3e7/0xc70 [ 68.339702][ T7600] ? lock_acquire+0x1d1/0x380 [ 68.339718][ T7600] ? __pfx___sctp_connect+0x10/0x10 [ 68.339736][ T7600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.339754][ T7600] sctp_inet_connect+0x15f/0x220 [ 68.339771][ T7600] __sys_connect_file+0x146/0x1a0 [ 68.339789][ T7600] __sys_connect+0x141/0x170 [ 68.339804][ T7600] ? __pfx___sys_connect+0x10/0x10 [ 68.339818][ T7600] ? __fget_files+0x21f/0x3d0 [ 68.339839][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 68.339856][ T7600] __x64_sys_connect+0x72/0xb0 [ 68.339870][ T7600] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.339886][ T7600] do_syscall_64+0x123/0x790 [ 68.339903][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.339914][ T7600] RIP: 0033:0x7ff97639f559 [ 68.339923][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.339934][ T7600] RSP: 002b:00007ff9772b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 68.339946][ T7600] RAX: ffffffffffffffda RBX: 00007ff976625fa0 RCX: 00007ff97639f559 [ 68.339953][ T7600] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 68.339959][ T7600] RBP: 00007ff9772b0090 R08: 0000000000000000 R09: 0000000000000000 [ 68.339966][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.339972][ T7600] R13: 00007ff976626038 R14: 00007ff976625fa0 R15: 00007fffe6d000a8 [ 68.339986][ T7600] [ 68.386775][ T7605] jffs2: notice: (7605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 68.396829][ T7605] vxcan1: entered allmulticast mode [ 68.397273][ T7604] vxcan1: left allmulticast mode [ 68.413067][ T7609] CacheFiles: Failed to register: -95 [ 68.624452][ T1966] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.707561][ T7618] loop0: detected capacity change from 0 to 3904 [ 68.755325][ T7618] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 68.755351][ T7618] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 68.755396][ T7618] loop0: [ 68.775072][ T1966] usb 5-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 68.776435][ T1966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.776458][ T1966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.776487][ T1966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.011541][ T7620] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 69.023780][ T7620] cramfs: wrong magic [ 69.066991][ T7624] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 69.067555][ T7624] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 69.174049][ T5782] Bluetooth: hci3: command tx timeout [ 69.194395][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.194699][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.199555][ T1966] hid-sensor-hub 0003:8086:0000.0004: unknown main item tag 0x0 [ 69.199577][ T1966] hid-sensor-hub 0003:8086:0000.0004: unknown main item tag 0x0 [ 69.214832][ T1966] hid-sensor-hub 0003:8086:0000.0004: hiddev0,hidraw1: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.0-1/input0 [ 69.357355][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 69.357371][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 69.357399][ T5192] loop0: [ 69.497599][ T7651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.520618][ T7654] FAULT_INJECTION: forcing a failure. [ 69.520618][ T7654] name failslab, interval 1, probability 0, space 0, times 0 [ 69.520640][ T7654] CPU: 0 UID: 0 PID: 7654 Comm: syz.2.532 Tainted: G Y syzkaller #0 PREEMPT(full) [ 69.520655][ T7654] Tainted: [Y]=FORCED_BIND [ 69.520659][ T7654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.520665][ T7654] Call Trace: [ 69.520669][ T7654] [ 69.520673][ T7654] dump_stack_lvl+0x100/0x190 [ 69.520693][ T7654] should_fail_ex.cold+0x5/0xa [ 69.520710][ T7654] should_failslab+0xc2/0x120 [ 69.520726][ T7654] __kmalloc_cache_noprof+0x91/0x6d0 [ 69.520738][ T7654] ? sctp_add_bind_addr+0xae/0x3e0 [ 69.520754][ T7654] sctp_add_bind_addr+0xae/0x3e0 [ 69.520768][ T7654] sctp_copy_local_addr_list+0x349/0x550 [ 69.520784][ T7654] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 69.520800][ T7654] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 69.520815][ T7654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.520834][ T7654] sctp_bind_addr_copy+0xe0/0x530 [ 69.520850][ T7654] sctp_connect_new_asoc+0x1c9/0x770 [ 69.520867][ T7654] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 69.520886][ T7654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.520905][ T7654] __sctp_connect+0x3e7/0xc70 [ 69.520921][ T7654] ? lock_acquire+0x1d1/0x380 [ 69.520937][ T7654] ? __pfx___sctp_connect+0x10/0x10 [ 69.520956][ T7654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.520973][ T7654] sctp_inet_connect+0x15f/0x220 [ 69.520991][ T7654] __sys_connect_file+0x146/0x1a0 [ 69.521008][ T7654] __sys_connect+0x141/0x170 [ 69.521022][ T7654] ? __pfx___sys_connect+0x10/0x10 [ 69.521037][ T7654] ? __fget_files+0x21f/0x3d0 [ 69.521058][ T7654] ? __pfx_ksys_write+0x10/0x10 [ 69.521075][ T7654] __x64_sys_connect+0x72/0xb0 [ 69.521089][ T7654] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.521105][ T7654] do_syscall_64+0x123/0x790 [ 69.521122][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.521134][ T7654] RIP: 0033:0x7f334519f559 [ 69.521143][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.521153][ T7654] RSP: 002b:00007f334611a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 69.521164][ T7654] RAX: ffffffffffffffda RBX: 00007f3345425fa0 RCX: 00007f334519f559 [ 69.521171][ T7654] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 69.521178][ T7654] RBP: 00007f334611a090 R08: 0000000000000000 R09: 0000000000000000 [ 69.521184][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.521191][ T7654] R13: 00007f3345426038 R14: 00007f3345425fa0 R15: 00007fff2cf75288 [ 69.521205][ T7654] [ 69.652765][ T7662] qrtr: Invalid version 0 [ 69.831628][ T7668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.840769][ T7668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.956600][ T7671] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 69.986568][ T7673] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 69.986890][ T7673] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 70.168166][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 70.170079][ T7678] FAULT_INJECTION: forcing a failure. [ 70.170079][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 70.170101][ T7678] CPU: 1 UID: 0 PID: 7678 Comm: syz.3.541 Tainted: G Y syzkaller #0 PREEMPT(full) [ 70.170117][ T7678] Tainted: [Y]=FORCED_BIND [ 70.170121][ T7678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.170128][ T7678] Call Trace: [ 70.170132][ T7678] [ 70.170136][ T7678] dump_stack_lvl+0x100/0x190 [ 70.170157][ T7678] should_fail_ex.cold+0x5/0xa [ 70.170174][ T7678] should_failslab+0xc2/0x120 [ 70.170191][ T7678] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.170205][ T7678] ? __kernfs_new_node+0xd2/0xa10 [ 70.170236][ T7678] __kernfs_new_node+0xd2/0xa10 [ 70.170254][ T7678] ? __pfx___kernfs_new_node+0x10/0x10 [ 70.170269][ T7678] ? lock_acquire+0x1d1/0x380 [ 70.170282][ T7678] ? kernfs_root+0x23/0x2a0 [ 70.170294][ T7678] ? find_held_lock+0x2b/0x80 [ 70.170304][ T7678] ? kernfs_root+0xee/0x2a0 [ 70.170314][ T7678] ? kernfs_root+0xee/0x2a0 [ 70.170328][ T7678] kernfs_new_node+0x194/0x200 [ 70.170343][ T7678] ? __pfx_kernfs_new_node+0x10/0x10 [ 70.170357][ T7678] ? kernfs_add_one+0x213/0xb40 [ 70.170373][ T7678] __kernfs_create_file+0x53/0x350 [ 70.170392][ T7678] sysfs_add_file_mode_ns+0x207/0x3c0 [ 70.170407][ T7678] internal_create_group+0x593/0xfb0 [ 70.170424][ T7678] ? __pfx_internal_create_group+0x10/0x10 [ 70.170441][ T7678] ? kernfs_create_link+0x1f1/0x280 [ 70.170460][ T7678] internal_create_groups+0x9d/0x150 [ 70.170474][ T7678] device_add+0x7c8/0x1970 [ 70.170491][ T7678] ? __pfx_device_add+0x10/0x10 [ 70.170505][ T7678] ? lockdep_init_map_type+0x5c/0x250 [ 70.170519][ T7678] ? __init_waitqueue_head+0xca/0x150 [ 70.170537][ T7678] netdev_register_kobject+0x1df/0x410 [ 70.170555][ T7678] register_netdevice+0x1313/0x26b0 [ 70.170571][ T7678] ? __pfx_register_netdevice+0x10/0x10 [ 70.170585][ T7678] ? dst_cache_init+0x266/0x350 [ 70.170600][ T7678] geneve_newlink+0x9a2/0x1250 [ 70.170617][ T7678] ? __pfx_geneve_newlink+0x10/0x10 [ 70.170639][ T7678] ? rtnl_create_link+0xa4b/0xf80 [ 70.170651][ T7678] ? __pfx_geneve_newlink+0x10/0x10 [ 70.170664][ T7678] rtnl_newlink+0x1697/0x2620 [ 70.170681][ T7678] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.170692][ T7678] ? avc_has_perm_noaudit+0x56/0x470 [ 70.170707][ T7678] ? find_held_lock+0x2b/0x80 [ 70.170717][ T7678] ? avc_has_perm_noaudit+0x11e/0x470 [ 70.170730][ T7678] ? avc_has_perm_noaudit+0x11e/0x470 [ 70.170759][ T7678] ? lock_acquire+0x1d1/0x380 [ 70.170772][ T7678] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 70.170784][ T7678] ? find_held_lock+0x2b/0x80 [ 70.170794][ T7678] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 70.170805][ T7678] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 70.170818][ T7678] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.170831][ T7678] rtnetlink_rcv_msg+0x95e/0xe90 [ 70.170844][ T7678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.170864][ T7678] netlink_rcv_skb+0x159/0x420 [ 70.170876][ T7678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.170889][ T7678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.170905][ T7678] ? netlink_deliver_tap+0x1ae/0xb50 [ 70.170925][ T7678] netlink_unicast+0x668/0x950 [ 70.170945][ T7678] ? __pfx_netlink_unicast+0x10/0x10 [ 70.170961][ T7678] netlink_sendmsg+0x9ac/0x10c0 [ 70.170976][ T7678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.170991][ T7678] ? selinux_socket_sendmsg+0x198/0x2f0 [ 70.171011][ T7678] ? ____sys_sendmsg+0xa99/0xc30 [ 70.171025][ T7678] ____sys_sendmsg+0xa99/0xc30 [ 70.171038][ T7678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.171051][ T7678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.171073][ T7678] ___sys_sendmsg+0x190/0x1e0 [ 70.171088][ T7678] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.171102][ T7678] ? futex_wait+0x11e/0x370 [ 70.171121][ T7678] ? find_held_lock+0x2b/0x80 [ 70.171141][ T7678] __sys_sendmsg+0x160/0x210 [ 70.171158][ T7678] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.171184][ T7678] do_syscall_64+0x123/0x790 [ 70.171201][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.171213][ T7678] RIP: 0033:0x7ff97639f559 [ 70.171224][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.171234][ T7678] RSP: 002b:00007ff9772b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.171246][ T7678] RAX: ffffffffffffffda RBX: 00007ff976625fa0 RCX: 00007ff97639f559 [ 70.171253][ T7678] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000006 [ 70.171259][ T7678] RBP: 00007ff976436b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.171266][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.171273][ T7678] R13: 00007ff976626038 R14: 00007ff976625fa0 R15: 00007fffe6d000a8 [ 70.171289][ T7678] [ 70.447179][ T7686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.450054][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 70.490434][ T7688] Invalid argument reading file caps for ./file0 [ 70.555335][ T7692] netlink: 'syz.1.548': attribute type 2 has an invalid length. [ 70.555793][ T7692] sch_tbf: burst 65537 is lower than device lo mtu (11337746) ! [ 70.648054][ T7694] netlink: 'syz.1.549': attribute type 63 has an invalid length. [ 70.648071][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 70.766005][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 70.766022][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 70.766049][ T5192] loop0: [ 70.837494][ T7707] fuse: Unknown parameter 'lowerdir' [ 70.837944][ T7707] tmpfs: Bad value for 'mpol' [ 70.940299][ T7716] ip6t_srh: unknown srh match flags 7700 [ 71.022955][ T7725] ptrace attach of "/syz-executor exec"[5777] was attempted by ""[7725] [ 71.038390][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 71.038406][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.038434][ T5192] loop0: [ 71.178748][ T7733] nvme_fabrics: missing parameter 'transport=%s' [ 71.178765][ T7733] nvme_fabrics: missing parameter 'nqn=%s' [ 71.180243][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.180315][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.405542][ T929] usb 5-1: USB disconnect, device number 4 [ 71.405967][ T7756] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.569'. [ 71.405981][ T7756] veth0_to_bond: default FDB implementation only supports local addresses [ 71.472386][ T7764] FAULT_INJECTION: forcing a failure. [ 71.472386][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 71.472417][ T7764] CPU: 3 UID: 0 PID: 7764 Comm: syz.1.571 Tainted: G Y syzkaller #0 PREEMPT(full) [ 71.472440][ T7764] Tainted: [Y]=FORCED_BIND [ 71.472446][ T7764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.472456][ T7764] Call Trace: [ 71.472463][ T7764] [ 71.472469][ T7764] dump_stack_lvl+0x100/0x190 [ 71.472500][ T7764] should_fail_ex.cold+0x5/0xa [ 71.472526][ T7764] should_failslab+0xc2/0x120 [ 71.472550][ T7764] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.472568][ T7764] ? sctp_add_bind_addr+0xae/0x3e0 [ 71.472593][ T7764] sctp_add_bind_addr+0xae/0x3e0 [ 71.472614][ T7764] sctp_copy_local_addr_list+0x349/0x550 [ 71.472639][ T7764] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 71.472663][ T7764] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 71.472686][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.472713][ T7764] sctp_bind_addr_copy+0xe0/0x530 [ 71.472737][ T7764] sctp_connect_new_asoc+0x1c9/0x770 [ 71.472763][ T7764] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 71.472797][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.472826][ T7764] __sctp_connect+0x3e7/0xc70 [ 71.472850][ T7764] ? lock_acquire+0x1d1/0x380 [ 71.472874][ T7764] ? __pfx___sctp_connect+0x10/0x10 [ 71.472903][ T7764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.472929][ T7764] sctp_inet_connect+0x15f/0x220 [ 71.472955][ T7764] __sys_connect_file+0x146/0x1a0 [ 71.472982][ T7764] __sys_connect+0x141/0x170 [ 71.473003][ T7764] ? __pfx___sys_connect+0x10/0x10 [ 71.473025][ T7764] ? __fget_files+0x21f/0x3d0 [ 71.473058][ T7764] ? __pfx_ksys_write+0x10/0x10 [ 71.473084][ T7764] __x64_sys_connect+0x72/0xb0 [ 71.473105][ T7764] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.473128][ T7764] do_syscall_64+0x123/0x790 [ 71.473153][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.473171][ T7764] RIP: 0033:0x7f0dd9b9f559 [ 71.473186][ T7764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.473200][ T7764] RSP: 002b:00007f0dd7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 71.473218][ T7764] RAX: ffffffffffffffda RBX: 00007f0dd9e25fa0 RCX: 00007f0dd9b9f559 [ 71.473229][ T7764] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 71.473239][ T7764] RBP: 00007f0dd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 71.473249][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.473259][ T7764] R13: 00007f0dd9e26038 R14: 00007f0dd9e25fa0 R15: 00007ffe7687ec78 [ 71.473283][ T7764] [ 71.483733][ T5861] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.503244][ T7768] loop0: detected capacity change from 0 to 3904 [ 71.530601][ T7768] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 71.530627][ T7768] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.530672][ T7768] loop0: [ 71.567301][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.644228][ T5861] usb 8-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 71.645051][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 71.645066][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.645078][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 71.645090][ T5861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 71.648380][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.648394][ T5861] usb 8-1: Product: syz [ 71.648401][ T5861] usb 8-1: Manufacturer: syz [ 71.648408][ T5861] usb 8-1: SerialNumber: syz [ 71.650426][ T5861] usb 8-1: config 0 descriptor?? [ 71.700678][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.709922][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.711700][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.716207][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.721093][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.721557][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.799493][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.846927][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 71.846964][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 71.859743][ T5861] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 71.863553][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 71.903186][ T7789] FAULT_INJECTION: forcing a failure. [ 71.903186][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 71.903228][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.1.578 Tainted: G Y syzkaller #0 PREEMPT(full) [ 71.903244][ T7789] Tainted: [Y]=FORCED_BIND [ 71.903248][ T7789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.903255][ T7789] Call Trace: [ 71.903266][ T7789] [ 71.903271][ T7789] dump_stack_lvl+0x100/0x190 [ 71.903300][ T7789] should_fail_ex.cold+0x5/0xa [ 71.903317][ T7789] should_failslab+0xc2/0x120 [ 71.903336][ T7789] __kmalloc_noprof+0xfc/0x840 [ 71.903349][ T7789] ? tomoyo_encode2+0xfb/0x3c0 [ 71.903365][ T7789] tomoyo_encode2+0xfb/0x3c0 [ 71.903392][ T7789] tomoyo_encode+0x29/0x50 [ 71.903404][ T7789] tomoyo_realpath_from_path+0x18c/0x690 [ 71.903420][ T7789] tomoyo_path_number_perm+0x23c/0x580 [ 71.903436][ T7789] ? tomoyo_path_number_perm+0x22e/0x580 [ 71.903459][ T7789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 71.903482][ T7789] ? __lock_acquire+0x5c0/0x1f40 [ 71.903504][ T7789] ? __fget_files+0x34/0x3d0 [ 71.903521][ T7789] ? find_held_lock+0x2b/0x80 [ 71.903531][ T7789] ? hook_file_ioctl_common+0x140/0x440 [ 71.903548][ T7789] ? __fget_files+0x21f/0x3d0 [ 71.903567][ T7789] security_file_ioctl+0xd3/0x230 [ 71.903586][ T7789] __x64_sys_ioctl+0xb7/0x210 [ 71.903601][ T7789] do_syscall_64+0x123/0x790 [ 71.903622][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.903634][ T7789] RIP: 0033:0x7f0dd9b9f559 [ 71.903643][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.903653][ T7789] RSP: 002b:00007f0dd7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.903673][ T7789] RAX: ffffffffffffffda RBX: 00007f0dd9e25fa0 RCX: 00007f0dd9b9f559 [ 71.903680][ T7789] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 71.903686][ T7789] RBP: 00007f0dd9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.903692][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.903698][ T7789] R13: 00007f0dd9e26038 R14: 00007f0dd9e25fa0 R15: 00007ffe7687ec78 [ 71.903713][ T7789] [ 71.905694][ T7789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.909865][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.910135][ T7789] input: syz0 as /devices/virtual/input/input10 [ 72.077658][ T29] usb 8-1: USB disconnect, device number 4 [ 72.093603][ T5854] bridge_slave_1: left allmulticast mode [ 72.093621][ T5854] bridge_slave_1: left promiscuous mode [ 72.094032][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.105005][ T5854] bridge_slave_0: left allmulticast mode [ 72.105022][ T5854] bridge_slave_0: left promiscuous mode [ 72.105146][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.140240][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 72.140257][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 72.140283][ T5192] loop0: [ 72.197029][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 72.197046][ T42] audit: type=1400 audit(1793024826.005:642): avc: denied { write } for pid=7802 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.197383][ T42] audit: type=1400 audit(1793024826.005:643): avc: denied { unlink } for pid=7802 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2931 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.248568][ T7805] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 72.281866][ T42] audit: type=1400 audit(1793024826.085:644): avc: denied { shutdown } for pid=7804 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.286810][ T42] audit: type=1400 audit(1793024826.095:645): avc: denied { getopt } for pid=7804 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.295587][ T7806] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 72.320667][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.325244][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.329896][ T5854] bond0 (unregistering): Released all slaves [ 72.336019][ T5495] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.362691][ T7775] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.434794][ T7822] FAULT_INJECTION: forcing a failure. [ 72.434794][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 72.434816][ T7822] CPU: 3 UID: 0 PID: 7822 Comm: syz.1.582 Tainted: G Y syzkaller #0 PREEMPT(full) [ 72.434831][ T7822] Tainted: [Y]=FORCED_BIND [ 72.434835][ T7822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.434841][ T7822] Call Trace: [ 72.434845][ T7822] [ 72.434849][ T7822] dump_stack_lvl+0x100/0x190 [ 72.434870][ T7822] should_fail_ex.cold+0x5/0xa [ 72.434887][ T7822] should_failslab+0xc2/0x120 [ 72.434903][ T7822] __kmalloc_cache_noprof+0x91/0x6d0 [ 72.434915][ T7822] ? sctp_add_bind_addr+0xae/0x3e0 [ 72.434930][ T7822] sctp_add_bind_addr+0xae/0x3e0 [ 72.434944][ T7822] sctp_copy_local_addr_list+0x349/0x550 [ 72.434961][ T7822] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 72.434977][ T7822] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 72.434992][ T7822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.435011][ T7822] sctp_bind_addr_copy+0xe0/0x530 [ 72.435026][ T7822] sctp_connect_new_asoc+0x1c9/0x770 [ 72.435045][ T7822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 72.435063][ T7822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.435082][ T7822] __sctp_connect+0x3e7/0xc70 [ 72.435099][ T7822] ? lock_acquire+0x1d1/0x380 [ 72.435116][ T7822] ? __pfx___sctp_connect+0x10/0x10 [ 72.435135][ T7822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.435153][ T7822] sctp_inet_connect+0x15f/0x220 [ 72.435171][ T7822] __sys_connect_file+0x146/0x1a0 [ 72.435188][ T7822] __sys_connect+0x141/0x170 [ 72.435203][ T7822] ? __pfx___sys_connect+0x10/0x10 [ 72.435217][ T7822] ? __fget_files+0x21f/0x3d0 [ 72.435238][ T7822] ? __pfx_ksys_write+0x10/0x10 [ 72.435255][ T7822] __x64_sys_connect+0x72/0xb0 [ 72.435280][ T7822] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.435296][ T7822] do_syscall_64+0x123/0x790 [ 72.435313][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.435324][ T7822] RIP: 0033:0x7f0dd9b9f559 [ 72.435334][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.435345][ T7822] RSP: 002b:00007f0dd7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 72.435356][ T7822] RAX: ffffffffffffffda RBX: 00007f0dd9e25fa0 RCX: 00007f0dd9b9f559 [ 72.435363][ T7822] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 72.435370][ T7822] RBP: 00007f0dd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.435376][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.435382][ T7822] R13: 00007f0dd9e26038 R14: 00007f0dd9e25fa0 R15: 00007ffe7687ec78 [ 72.435397][ T7822] [ 72.438442][ T42] audit: type=1400 audit(1793024826.245:646): avc: denied { write } for pid=7819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.481424][ T42] audit: type=1400 audit(1793024826.285:647): avc: denied { write } for pid=7826 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.568569][ T5495] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.585066][ T42] audit: type=1400 audit(1793024826.395:648): avc: denied { ioctl } for pid=7828 comm="syz.1.584" path="socket:[18951]" dev="sockfs" ino=18951 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.586927][ T42] audit: type=1400 audit(1793024826.395:649): avc: denied { block_suspend } for pid=7828 comm="syz.1.584" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.614754][ T7829] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 72.651021][ T42] audit: type=1400 audit(1793024826.455:650): avc: denied { getopt } for pid=7833 comm="syz.3.585" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.706233][ T42] audit: type=1400 audit(1793024826.515:651): avc: denied { write } for pid=7840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.753406][ T5854] hsr_slave_0: left promiscuous mode [ 72.755682][ T5854] hsr_slave_1: left promiscuous mode [ 72.758807][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.758819][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.760696][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.760706][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.768425][ T5854] veth1_macvtap: left promiscuous mode [ 72.768453][ T5854] veth0_macvtap: left promiscuous mode [ 72.768495][ T5854] veth1_vlan: left promiscuous mode [ 72.768525][ T5854] veth0_vlan: left promiscuous mode [ 72.784810][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 72.901369][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 72.901991][ T7865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.590'. [ 72.911987][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 72.921072][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 73.004205][ T5495] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.045255][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.045311][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.045366][ T7775] bridge_slave_0: entered allmulticast mode [ 73.046456][ T7775] bridge_slave_0: entered promiscuous mode [ 73.050007][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.050206][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.050302][ T7775] bridge_slave_1: entered allmulticast mode [ 73.052353][ T7775] bridge_slave_1: entered promiscuous mode [ 73.077766][ T7769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.572'. [ 73.087187][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.089063][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.100750][ T7775] team0: Port device team_slave_0 added [ 73.102453][ T7775] team0: Port device team_slave_1 added [ 73.119976][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.119987][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.119999][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.121261][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.121270][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.121286][ T7775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.143057][ T7775] hsr_slave_0: entered promiscuous mode [ 73.143548][ T7775] hsr_slave_1: entered promiscuous mode [ 73.146164][ T7775] debugfs: 'hsr0' already exists in 'hsr' [ 73.146176][ T7775] Cannot create hsr debugfs directory [ 73.220692][ T5495] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.292715][ T7886] mmap: syz.1.594 (7886): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 73.312212][ T7894] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 73.312581][ T7894] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 73.350243][ T7775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.359297][ T7775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.361581][ T7775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.363264][ T7775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.366550][ T7775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.375720][ T7775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.376455][ T7775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.380502][ T7775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.396940][ T7908] FAULT_INJECTION: forcing a failure. [ 73.396940][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.396961][ T7908] CPU: 2 UID: 0 PID: 7908 Comm: syz.1.604 Tainted: G Y syzkaller #0 PREEMPT(full) [ 73.396976][ T7908] Tainted: [Y]=FORCED_BIND [ 73.396980][ T7908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.396987][ T7908] Call Trace: [ 73.397007][ T7908] [ 73.397013][ T7908] dump_stack_lvl+0x100/0x190 [ 73.397034][ T7908] should_fail_ex.cold+0x5/0xa [ 73.397051][ T7908] _copy_from_user+0x2e/0xd0 [ 73.397065][ T7908] ctl_ioctl+0xf3/0xcc0 [ 73.397080][ T7908] ? __pfx_ctl_ioctl+0x10/0x10 [ 73.397108][ T7908] ? selinux_file_ioctl+0x1e0/0x290 [ 73.397125][ T7908] dm_ctl_ioctl+0x22/0x30 [ 73.397142][ T7908] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 73.397160][ T7908] __x64_sys_ioctl+0x18e/0x210 [ 73.397182][ T7908] do_syscall_64+0x123/0x790 [ 73.397208][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.397224][ T7908] RIP: 0033:0x7f0dd9b9f559 [ 73.397237][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.397247][ T7908] RSP: 002b:00007f0dd7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.397260][ T7908] RAX: ffffffffffffffda RBX: 00007f0dd9e25fa0 RCX: 00007f0dd9b9f559 [ 73.397267][ T7908] RDX: 0000200000000480 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 73.397275][ T7908] RBP: 00007f0dd7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 73.397282][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.397288][ T7908] R13: 00007f0dd9e26038 R14: 00007f0dd9e25fa0 R15: 00007ffe7687ec78 [ 73.397302][ T7908] [ 73.406991][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.407041][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.407148][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.407193][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.440936][ T7775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.449410][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.455677][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.493020][ T7775] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.497140][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.497216][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.500331][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.500376][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.554109][ T7921] ucma_write: process 495 (syz.1.602) changed security contexts after opening file descriptor, this is not allowed. [ 73.568253][ T7918] netlink: 'syz.0.599': attribute type 63 has an invalid length. [ 73.579213][ T7927] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 73.581977][ T7927] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 73.597361][ T7930] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 73.597913][ T7930] sch_tbf: burst 65537 is lower than device lo mtu (11337746) ! [ 73.737028][ T7950] FAULT_INJECTION: forcing a failure. [ 73.737028][ T7950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.737048][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.0.611 Tainted: G Y syzkaller #0 PREEMPT(full) [ 73.737064][ T7950] Tainted: [Y]=FORCED_BIND [ 73.737067][ T7950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.737073][ T7950] Call Trace: [ 73.737078][ T7950] [ 73.737082][ T7950] dump_stack_lvl+0x100/0x190 [ 73.737103][ T7950] should_fail_ex.cold+0x5/0xa [ 73.737119][ T7950] _copy_to_user+0x32/0xd0 [ 73.737134][ T7950] ctl_ioctl+0x17b/0xcc0 [ 73.737149][ T7950] ? __pfx_ctl_ioctl+0x10/0x10 [ 73.737176][ T7950] ? selinux_file_ioctl+0x1e0/0x290 [ 73.737189][ T7950] dm_ctl_ioctl+0x22/0x30 [ 73.737201][ T7950] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 73.737214][ T7950] __x64_sys_ioctl+0x18e/0x210 [ 73.737229][ T7950] do_syscall_64+0x123/0x790 [ 73.737265][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.737278][ T7950] RIP: 0033:0x7f41d539f559 [ 73.737287][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.737297][ T7950] RSP: 002b:00007f41d61bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.737309][ T7950] RAX: ffffffffffffffda RBX: 00007f41d5625fa0 RCX: 00007f41d539f559 [ 73.737316][ T7950] RDX: 0000200000000480 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 73.737322][ T7950] RBP: 00007f41d61bd090 R08: 0000000000000000 R09: 0000000000000000 [ 73.737328][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.737335][ T7950] R13: 00007f41d5626038 R14: 00007f41d5625fa0 R15: 00007ffd00e38ad8 [ 73.737349][ T7950] [ 73.737489][ T5782] Bluetooth: hci3: command tx timeout [ 73.776131][ T7775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.873784][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.909161][ T7775] veth0_vlan: entered promiscuous mode [ 73.911388][ T7972] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 73.913148][ T7972] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 73.924214][ T7775] veth1_vlan: entered promiscuous mode [ 73.940612][ T7775] veth0_macvtap: entered promiscuous mode [ 73.946879][ T7775] veth1_macvtap: entered promiscuous mode [ 73.960917][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.968592][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.003771][ T5888] usb 6-1: device descriptor read/64, error -71 [ 74.013721][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013912][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013939][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013967][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.028535][ T7974] netlink: 'syz.3.617': attribute type 63 has an invalid length. [ 74.067947][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.067968][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.088824][ T6488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.088837][ T6488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.263821][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.403866][ T5888] usb 6-1: device descriptor read/64, error -71 [ 74.514178][ T5888] usb usb6-port1: attempt power cycle [ 74.855008][ T5888] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 74.874372][ T5888] usb 6-1: device descriptor read/8, error -71 [ 75.068005][ T7999] FAULT_INJECTION: forcing a failure. [ 75.068005][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.068027][ T7999] CPU: 2 UID: 0 PID: 7999 Comm: syz.3.623 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.068043][ T7999] Tainted: [Y]=FORCED_BIND [ 75.068047][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.068053][ T7999] Call Trace: [ 75.068057][ T7999] [ 75.068062][ T7999] dump_stack_lvl+0x100/0x190 [ 75.068083][ T7999] should_fail_ex.cold+0x5/0xa [ 75.068100][ T7999] _copy_from_user+0x2e/0xd0 [ 75.068116][ T7999] ctl_ioctl+0x289/0xcc0 [ 75.068130][ T7999] ? __pfx_target_message+0x10/0x10 [ 75.068145][ T7999] ? __pfx_ctl_ioctl+0x10/0x10 [ 75.068173][ T7999] ? selinux_file_ioctl+0x1e0/0x290 [ 75.068186][ T7999] dm_ctl_ioctl+0x22/0x30 [ 75.068199][ T7999] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 75.068212][ T7999] __x64_sys_ioctl+0x18e/0x210 [ 75.068228][ T7999] do_syscall_64+0x123/0x790 [ 75.068247][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.068259][ T7999] RIP: 0033:0x7ff97639f559 [ 75.068271][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.068281][ T7999] RSP: 002b:00007ff9772b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.068292][ T7999] RAX: ffffffffffffffda RBX: 00007ff976625fa0 RCX: 00007ff97639f559 [ 75.068299][ T7999] RDX: 0000200000000480 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 75.068306][ T7999] RBP: 00007ff9772b0090 R08: 0000000000000000 R09: 0000000000000000 [ 75.068313][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.068319][ T7999] R13: 00007ff976626038 R14: 00007ff976625fa0 R15: 00007fffe6d000a8 [ 75.068333][ T7999] [ 75.104731][ T8002] netlink: 'syz.3.624': attribute type 2 has an invalid length. [ 75.105526][ T8002] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 75.135287][ T8004] syzkaller0: entered promiscuous mode [ 75.135301][ T8004] syzkaller0: entered allmulticast mode [ 75.152483][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 75.169407][ T5888] usb 6-1: device descriptor read/8, error -71 [ 75.177917][ T8007] syzkaller1: entered allmulticast mode [ 75.210031][ T8009] FAULT_INJECTION: forcing a failure. [ 75.210031][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 75.210054][ T8009] CPU: 3 UID: 0 PID: 8009 Comm: syz.0.625 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.210069][ T8009] Tainted: [Y]=FORCED_BIND [ 75.210073][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.210080][ T8009] Call Trace: [ 75.210084][ T8009] [ 75.210088][ T8009] dump_stack_lvl+0x100/0x190 [ 75.210110][ T8009] should_fail_ex.cold+0x5/0xa [ 75.210128][ T8009] should_failslab+0xc2/0x120 [ 75.210145][ T8009] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 75.210160][ T8009] ? __d_alloc+0x34/0xad0 [ 75.210173][ T8009] __d_alloc+0x34/0xad0 [ 75.210185][ T8009] d_alloc_pseudo+0x1c/0xc0 [ 75.210199][ T8009] alloc_file_pseudo+0x118/0x290 [ 75.210211][ T8009] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 75.210222][ T8009] ? alloc_fd+0x471/0x7a0 [ 75.210242][ T8009] sock_alloc_file+0x50/0x210 [ 75.210259][ T8009] __sys_socket+0x1c0/0x260 [ 75.210279][ T8009] ? fput+0x7c/0x100 [ 75.210303][ T8009] ? __pfx___sys_socket+0x10/0x10 [ 75.210325][ T8009] ? ksys_write+0x1ac/0x250 [ 75.210341][ T8009] ? __pfx_ksys_write+0x10/0x10 [ 75.210357][ T8009] __x64_sys_socket+0x72/0xb0 [ 75.210370][ T8009] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.210391][ T8009] do_syscall_64+0x123/0x790 [ 75.210410][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.210422][ T8009] RIP: 0033:0x7f41d539f559 [ 75.210432][ T8009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.210443][ T8009] RSP: 002b:00007f41d619c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.210455][ T8009] RAX: ffffffffffffffda RBX: 00007f41d5626090 RCX: 00007f41d539f559 [ 75.210462][ T8009] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 75.210468][ T8009] RBP: 00007f41d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.210475][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.210481][ T8009] R13: 00007f41d5626128 R14: 00007f41d5626090 R15: 00007ffd00e38ad8 [ 75.210495][ T8009] [ 75.276335][ T5888] usb usb6-port1: unable to enumerate USB device [ 75.332854][ T8013] __nla_validate_parse: 2 callbacks suppressed [ 75.332871][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.628'. [ 75.604464][ T8025] FAULT_INJECTION: forcing a failure. [ 75.604464][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 75.604486][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.3.633 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.604501][ T8025] Tainted: [Y]=FORCED_BIND [ 75.604505][ T8025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.604512][ T8025] Call Trace: [ 75.604516][ T8025] [ 75.604520][ T8025] dump_stack_lvl+0x100/0x190 [ 75.604540][ T8025] should_fail_ex.cold+0x5/0xa [ 75.604557][ T8025] should_failslab+0xc2/0x120 [ 75.604572][ T8025] __kvmalloc_node_noprof+0x113/0x9b0 [ 75.604588][ T8025] ? ctl_ioctl+0x944/0xcc0 [ 75.604604][ T8025] ctl_ioctl+0x944/0xcc0 [ 75.604616][ T8025] ? __pfx_target_message+0x10/0x10 [ 75.604630][ T8025] ? __pfx_ctl_ioctl+0x10/0x10 [ 75.604657][ T8025] ? selinux_file_ioctl+0x1e0/0x290 [ 75.604671][ T8025] dm_ctl_ioctl+0x22/0x30 [ 75.604682][ T8025] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 75.604695][ T8025] __x64_sys_ioctl+0x18e/0x210 [ 75.604710][ T8025] do_syscall_64+0x123/0x790 [ 75.604728][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.604739][ T8025] RIP: 0033:0x7ff97639f559 [ 75.604749][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.604760][ T8025] RSP: 002b:00007ff9772b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.604771][ T8025] RAX: ffffffffffffffda RBX: 00007ff976625fa0 RCX: 00007ff97639f559 [ 75.604785][ T8025] RDX: 0000200000000480 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 75.604792][ T8025] RBP: 00007ff9772b0090 R08: 0000000000000000 R09: 0000000000000000 [ 75.604798][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.604805][ T8025] R13: 00007ff976626038 R14: 00007ff976625fa0 R15: 00007fffe6d000a8 [ 75.604819][ T8025] [ 75.707220][ T8033] IPVS: length: 120 != 24 [ 75.712669][ T8033] ./dev: Can't lookup blockdev [ 75.718180][ T8037] netlink: 'syz.0.636': attribute type 2 has an invalid length. [ 75.718701][ T8037] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 75.794904][ T8046] ip6t_srh: unknown srh invflags 7863 [ 75.814584][ T5782] Bluetooth: hci3: command tx timeout [ 75.905074][ T8058] FAULT_INJECTION: forcing a failure. [ 75.905074][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.905097][ T8058] CPU: 2 UID: 0 PID: 8058 Comm: syz.3.644 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.905112][ T8058] Tainted: [Y]=FORCED_BIND [ 75.905116][ T8058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.905123][ T8058] Call Trace: [ 75.905126][ T8058] [ 75.905131][ T8058] dump_stack_lvl+0x100/0x190 [ 75.905151][ T8058] should_fail_ex.cold+0x5/0xa [ 75.905167][ T8058] _copy_from_user+0x2e/0xd0 [ 75.905181][ T8058] ctl_ioctl+0x896/0xcc0 [ 75.905194][ T8058] ? __pfx_target_message+0x10/0x10 [ 75.905209][ T8058] ? __pfx_ctl_ioctl+0x10/0x10 [ 75.905236][ T8058] ? selinux_file_ioctl+0x1e0/0x290 [ 75.905249][ T8058] dm_ctl_ioctl+0x22/0x30 [ 75.905261][ T8058] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 75.905274][ T8058] __x64_sys_ioctl+0x18e/0x210 [ 75.905288][ T8058] do_syscall_64+0x123/0x790 [ 75.905306][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.905317][ T8058] RIP: 0033:0x7ff97639f559 [ 75.905326][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.905337][ T8058] RSP: 002b:00007ff9772b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.905348][ T8058] RAX: ffffffffffffffda RBX: 00007ff976625fa0 RCX: 00007ff97639f559 [ 75.905355][ T8058] RDX: 0000200000000480 RSI: 00000000c138fd0e RDI: 0000000000000003 [ 75.905361][ T8058] RBP: 00007ff9772b0090 R08: 0000000000000000 R09: 0000000000000000 [ 75.905368][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.905374][ T8058] R13: 00007ff976626038 R14: 00007ff976625fa0 R15: 00007fffe6d000a8 [ 75.905388][ T8058] [ 75.922625][ T8060] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 75.981750][ T8056] warning: `syz.0.642' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.037153][ T8069] netlink: 'syz.4.647': attribute type 2 has an invalid length. [ 76.037980][ T8069] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 76.234050][ T6966] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.363783][ T6966] usb 8-1: device descriptor read/64, error -71 [ 76.624561][ T6966] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.753995][ T6966] usb 8-1: device descriptor read/64, error -71 [ 76.846511][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'. [ 76.874751][ T6966] usb usb8-port1: attempt power cycle [ 76.971034][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 76.971054][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 77.173019][ T8103] xt_REDIRECT: bad MAP_IPS. [ 77.199065][ T8105] netlink: 'syz.4.657': attribute type 2 has an invalid length. [ 77.199658][ T8105] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 77.218441][ T8107] program syz.0.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.233863][ T6966] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.242861][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 77.243345][ T8109] lo speed is unknown, defaulting to 1000 [ 77.243374][ T8109] lo speed is unknown, defaulting to 1000 [ 77.244366][ T8109] lo speed is unknown, defaulting to 1000 [ 77.245169][ T8109] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 77.245198][ T8109] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 77.245233][ T8109] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 77.254902][ T6966] usb 8-1: device descriptor read/8, error -71 [ 77.260044][ T8109] lo speed is unknown, defaulting to 1000 [ 77.261542][ T8109] lo speed is unknown, defaulting to 1000 [ 77.262212][ T8109] lo speed is unknown, defaulting to 1000 [ 77.262850][ T8109] lo speed is unknown, defaulting to 1000 [ 77.265246][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 77.265260][ T42] audit: type=1400 audit(1793024831.075:673): avc: denied { write } for pid=8110 comm="syz.0.664" laddr=::1 lport=255 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.268716][ T42] audit: type=1400 audit(1793024831.075:674): avc: denied { write } for pid=8108 comm="syz.4.663" name="rdma_cm" dev="configfs" ino=5590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.269134][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 77.270178][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 77.270191][ T8109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.663'. [ 77.270199][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.663'. [ 77.369038][ T42] audit: type=1400 audit(1793024831.175:675): avc: denied { read } for pid=8117 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.370006][ T42] audit: type=1400 audit(1793024831.175:676): avc: denied { append } for pid=8117 comm="syz.0.667" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.371658][ T42] audit: type=1400 audit(1793024831.175:677): avc: denied { mounton } for pid=8117 comm="syz.0.667" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 77.371778][ T8119] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 77.372243][ T8119] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 77.373610][ T8119] cramfs: wrong magic [ 77.470442][ T8128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.491909][ T42] audit: type=1400 audit(1793024831.295:678): avc: denied { bind } for pid=8129 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.493941][ T6966] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.496932][ T8130] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 77.514805][ T8137] netlink: 'syz.0.672': attribute type 2 has an invalid length. [ 77.519872][ T8130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.520919][ T8137] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 77.524202][ T6966] usb 8-1: device descriptor read/8, error -71 [ 77.531443][ T8130] vlan3: entered allmulticast mode [ 77.531457][ T8130] bond1: entered allmulticast mode [ 77.534391][ T8130] jffs2: notice: (8130) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 77.537495][ T42] audit: type=1400 audit(1793024831.345:679): avc: denied { write } for pid=8129 comm="syz.1.671" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.539866][ T42] audit: type=1400 audit(1793024831.345:680): avc: denied { mounton } for pid=8129 comm="syz.1.671" path="/173/mnt" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.610813][ T8150] loop0: detected capacity change from 0 to 3904 [ 77.636657][ T6966] usb usb8-port1: unable to enumerate USB device [ 77.656648][ T8150] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 77.656672][ T8150] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 77.656719][ T8150] loop0: [ 77.658679][ T8152] cgroup: Setting release_agent not allowed [ 77.697199][ T8155] input: syz1 as /devices/virtual/input/input11 [ 77.791665][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 77.806699][ T8162] netlink: 'syz.0.683': attribute type 2 has an invalid length. [ 77.807035][ T8162] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 77.894064][ T5782] Bluetooth: hci3: command tx timeout [ 77.952802][ T42] audit: type=1400 audit(1793024831.755:681): avc: denied { bind } for pid=8170 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.953224][ T42] audit: type=1400 audit(1793024831.755:682): avc: denied { name_bind } for pid=8170 comm="syz.1.687" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 77.996229][ T8178] loop0: detected capacity change from 0 to 3904 [ 78.178056][ T8178] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 78.178073][ T8178] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 78.178099][ T8178] loop0: [ 78.217219][ T8183] netlink: 'syz.1.692': attribute type 2 has an invalid length. [ 78.217583][ T8183] sch_tbf: burst 65537 is lower than device lo mtu (11337746) ! [ 78.250216][ T8185] xt_NETMAP: bad MAP_IPS. [ 78.290592][ T8187] kvm: MWAIT instruction emulated as NOP! [ 78.312088][ T8195] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.391775][ T8195] lo speed is unknown, defaulting to 1000 [ 78.601294][ T8210] ip_tables: iptables: counters copy to user failed while replacing table [ 78.710141][ T8218] loop0: detected capacity change from 0 to 3904 [ 78.759151][ T8218] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 78.759168][ T8218] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 78.759193][ T8218] loop0: [ 78.836351][ T8223] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 78.885323][ T8225] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 78.894192][ T8225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.908930][ T8225] vlan2: entered allmulticast mode [ 78.908942][ T8225] bond1: entered allmulticast mode [ 78.916834][ T8225] jffs2: notice: (8225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 79.112520][ T8242] Bluetooth: hci0: invalid len left 17, exp >= 247 [ 79.174227][ T8251] openvswitch: netlink: VXLAN extension message has 20 unknown bytes. [ 79.258330][ T8258] GUP no longer grows the stack in syz.3.715 (8258): 200000007000-20000000a000 (200000004000) [ 79.258360][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.3.715 Tainted: G Y syzkaller #0 PREEMPT(full) [ 79.258383][ T8258] Tainted: [Y]=FORCED_BIND [ 79.258389][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.258399][ T8258] Call Trace: [ 79.258405][ T8258] [ 79.258412][ T8258] dump_stack_lvl+0x100/0x190 [ 79.258451][ T8258] gup_vma_lookup.cold+0x83/0x96 [ 79.258478][ T8258] __get_user_pages+0x252/0x2c20 [ 79.258508][ T8258] ? __pfx___get_user_pages+0x10/0x10 [ 79.258527][ T8258] ? __pfx_down_read_killable+0x10/0x10 [ 79.258546][ T8258] ? lock_acquire+0x1d1/0x380 [ 79.258568][ T8258] ? __pte_offset_map+0x9a/0x470 [ 79.258615][ T8258] __gup_longterm_locked+0x87d/0x16f0 [ 79.258642][ T8258] ? __pte_offset_map+0x1e9/0x470 [ 79.258665][ T8258] ? __pfx___gup_longterm_locked+0x10/0x10 [ 79.258687][ T8258] ? lock_acquire+0x1d1/0x380 [ 79.258708][ T8258] ? gup_fast_fallback+0xa3f/0x29d0 [ 79.258728][ T8258] ? find_held_lock+0x2b/0x80 [ 79.258751][ T8258] gup_fast_fallback+0x1726/0x29d0 [ 79.258795][ T8258] ? __pfx_gup_fast_fallback+0x10/0x10 [ 79.258817][ T8258] ? __lock_acquire+0x5c0/0x1f40 [ 79.258839][ T8258] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 79.258862][ T8258] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.258889][ T8258] get_user_pages_fast+0xa7/0xf0 [ 79.258909][ T8258] ? __pfx_get_user_pages_fast+0x10/0x10 [ 79.258927][ T8258] ? lock_acquire+0x1d1/0x380 [ 79.258946][ T8258] ? pipe_lock+0x69/0x80 [ 79.258974][ T8258] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 79.259000][ T8258] ? __mutex_lock+0x267/0x1c10 [ 79.259023][ T8258] ? pipe_lock+0x69/0x80 [ 79.259048][ T8258] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 79.259072][ T8258] ? __pfx___mutex_lock+0x10/0x10 [ 79.259096][ T8258] ? __fget_files+0x34/0x3d0 [ 79.259120][ T8258] ? import_ubuf+0x1b6/0x220 [ 79.259145][ T8258] iov_iter_get_pages2+0xa3/0x100 [ 79.259165][ T8258] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 79.259184][ T8258] ? wait_for_space+0x342/0x410 [ 79.259215][ T8258] __do_sys_vmsplice+0x7dd/0x13c0 [ 79.259239][ T8258] ? find_held_lock+0x2b/0x80 [ 79.259257][ T8258] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 79.259283][ T8258] ? __pfx_futex_wait+0x10/0x10 [ 79.259347][ T8258] ? do_syscall_64+0x123/0x790 [ 79.259371][ T8258] do_syscall_64+0x123/0x790 [ 79.259397][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.259444][ T8258] RIP: 0033:0x7ff97639f559 [ 79.259460][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.259477][ T8258] RSP: 002b:00007ff97728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 79.259496][ T8258] RAX: ffffffffffffffda RBX: 00007ff976626090 RCX: 00007ff97639f559 [ 79.259511][ T8258] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 79.259521][ T8258] RBP: 00007ff976436b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.259532][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.259541][ T8258] R13: 00007ff976626128 R14: 00007ff976626090 R15: 00007fffe6d000a8 [ 79.259567][ T8258] [ 79.397606][ T8261] vlan2: entered allmulticast mode [ 79.397629][ T8261] team_slave_1: entered allmulticast mode [ 79.404152][ T8261] jffs2: notice: (8261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 79.974233][ T5782] Bluetooth: hci3: command tx timeout [ 79.975271][ T8298] bonding: unable to delete non-existent b [ 80.524177][ T8280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.524619][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.524691][ T8280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.526462][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.526546][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.526573][ T8280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.528575][ T8280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.575025][ T8314] validate_nla: 1 callbacks suppressed [ 80.575038][ T8314] netlink: 'syz.0.737': attribute type 2 has an invalid length. [ 80.575365][ T8314] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 80.616514][ T8318] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 80.628841][ T8318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.634697][ T8322] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.639373][ T8318] vlan3: entered allmulticast mode [ 80.639389][ T8318] bond2: entered allmulticast mode [ 80.641939][ T8318] jffs2: notice: (8318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 80.645398][ T8321] overlay: ./file0 is not a directory [ 80.653379][ T8321] __nla_validate_parse: 6 callbacks suppressed [ 80.653392][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.653402][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.653412][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.653520][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.653531][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.653540][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.653599][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.653606][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.653612][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.654503][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.654512][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.654518][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.654574][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.654582][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.654588][ T8321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.654642][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.654697][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.654752][ T8321] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 80.676945][ T8327] jffs2: notice: (8327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 81.098135][ T8346] hfs: can't find a HFS filesystem on dev sr0 [ 81.165913][ T8350] sch_tbf: burst 65537 is lower than device lo mtu (11337746) ! [ 81.583281][ T8361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.734841][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.758034][ T8370] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.833066][ T8384] loop0: detected capacity change from 0 to 3904 [ 81.913458][ T8370] lo speed is unknown, defaulting to 1000 [ 81.917309][ T8384] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 81.917324][ T8384] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 81.917350][ T8384] loop0: [ 81.988601][ T8388] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 81.996572][ T6489] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.054973][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.200912][ T8391] nbd: socks must be embedded in a SOCK_ITEM attr [ 82.201143][ T8391] block nbd0: shutting down sockets [ 82.223803][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 82.225039][ T9] usb 5-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 82.226099][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 82.226121][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.226138][ T9] usb 5-1: config 0 has no interface number 0 [ 82.226169][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.228091][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.228112][ T9] usb 5-1: Product: syz [ 82.228126][ T9] usb 5-1: Manufacturer: syz [ 82.228139][ T9] usb 5-1: SerialNumber: syz [ 82.236089][ T9] usb 5-1: config 0 descriptor?? [ 82.273346][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input12 [ 82.445601][ T8404] tls_set_device_offload: netdev not found [ 82.526455][ T8412] /dev/sr0: Can't open blockdev [ 82.534266][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.543879][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.543902][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.554741][ T8418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.560505][ T8418] vlan2: entered allmulticast mode [ 82.560516][ T8418] bond1: entered allmulticast mode [ 82.562396][ T8418] jffs2: notice: (8418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 82.568838][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 82.568849][ T42] audit: type=1400 audit(1793024836.375:711): avc: denied { write } for pid=8417 comm="syz.3.769" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.588139][ T8422] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 82.687816][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 82.687839][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 82.687882][ T5192] loop0: [ 82.716457][ T42] audit: type=1400 audit(1793024836.525:712): avc: denied { accept } for pid=8429 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.724916][ T8430] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 82.732147][ T42] audit: type=1400 audit(1793024836.535:713): avc: denied { listen } for pid=8429 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.818319][ T42] audit: type=1400 audit(1793024836.625:714): avc: denied { write } for pid=8438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.827946][ T8441] Bluetooth: MGMT ver 1.23 [ 82.829761][ T42] audit: type=1400 audit(1793024836.635:715): avc: denied { getopt } for pid=8440 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.875470][ T42] audit: type=1400 audit(1793024836.685:716): avc: denied { write } for pid=8443 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.942275][ T8449] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 82.947847][ T42] audit: type=1400 audit(1793024836.755:717): avc: denied { write } for pid=8445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.991617][ T8452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.992960][ T42] audit: type=1400 audit(1793024836.795:718): avc: denied { write } for pid=8453 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.998628][ T8452] vlan4: entered allmulticast mode [ 82.998639][ T8452] bond2: entered allmulticast mode [ 83.000726][ T8452] jffs2: notice: (8452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 83.001809][ T42] audit: type=1400 audit(1793024836.805:719): avc: denied { write } for pid=8451 comm="syz.1.778" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.437532][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 83.437548][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 83.437573][ T5192] loop0: [ 83.606574][ T42] audit: type=1400 audit(1793024837.415:720): avc: denied { write } for pid=8483 comm="syz.1.786" name="/" dev="9p" ino=71827721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.815287][ T9] usb 5-1: USB disconnect, device number 5 [ 84.063884][ T5786] Bluetooth: hci4: command 0x1003 tx timeout [ 84.063919][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 84.134392][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.139722][ T8489] vlan3: entered allmulticast mode [ 84.139734][ T8489] bond1: entered allmulticast mode [ 84.141358][ T8489] jffs2: notice: (8489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 84.337132][ T8511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.354561][ T8511] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 84.372935][ T8511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.372949][ T8511] block device autoloading is deprecated and will be removed. [ 84.417754][ T8511] md: invalid raid superblock magic on ram2 [ 84.417773][ T8511] md: ram2 does not have a valid v0.0 superblock, not importing! [ 84.417840][ T8511] md: md_import_device returned -22 [ 84.423333][ T8523] loop0: detected capacity change from 0 to 3904 [ 84.436856][ T5782] Bluetooth: hci3: unexpected event for opcode 0x200c [ 84.445848][ T5823] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 84.455684][ T8523] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 84.455705][ T8523] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 84.455749][ T8523] loop0: [ 84.554344][ T7419] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 84.614520][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.711801][ T8547] /dev/sg0: Can't lookup blockdev [ 85.072826][ T8565] loop0: detected capacity change from 0 to 3904 [ 85.158736][ T8565] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 85.158752][ T8565] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.158778][ T8565] loop0: [ 85.253889][ T8571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.261471][ T8571] vlan4: entered allmulticast mode [ 85.261488][ T8571] bond2: entered allmulticast mode [ 85.289380][ T8577] No control pipe specified [ 85.638883][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 85.638899][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.638925][ T5192] loop0: [ 85.713004][ T8607] validate_nla: 67 callbacks suppressed [ 85.713018][ T8607] netlink: 'syz.1.818': attribute type 4 has an invalid length. [ 85.738528][ T8608] nbd: nbd1 already in use [ 85.738635][ T8609] block nbd1: NBD_DISCONNECT [ 85.740658][ T8609] block nbd1: NBD_DISCONNECT [ 85.740809][ T8608] nbd: nbd1 already in use [ 85.740835][ T8609] block nbd1: NBD_DISCONNECT [ 85.742292][ T8608] nbd: nbd1 already in use [ 85.742317][ T8609] block nbd1: NBD_DISCONNECT [ 85.742487][ T8609] block nbd1: NBD_DISCONNECT [ 85.742639][ T8608] nbd: nbd1 already in use [ 85.742668][ T8609] block nbd1: NBD_DISCONNECT [ 85.742834][ T8609] block nbd1: NBD_DISCONNECT [ 85.742967][ T8608] nbd: nbd1 already in use [ 85.742993][ T8609] block nbd1: NBD_DISCONNECT [ 85.743170][ T8608] nbd: nbd1 already in use [ 85.743192][ T8609] block nbd1: NBD_DISCONNECT [ 85.743363][ T8609] block nbd1: NBD_DISCONNECT [ 85.743497][ T8608] nbd: nbd1 already in use [ 85.743523][ T8609] block nbd1: NBD_DISCONNECT [ 85.744900][ T8608] nbd: nbd1 already in use [ 85.744925][ T8609] block nbd1: NBD_DISCONNECT [ 85.745119][ T8609] block nbd1: NBD_DISCONNECT [ 85.745265][ T8608] nbd: nbd1 already in use [ 85.745290][ T8609] block nbd1: NBD_DISCONNECT [ 85.745461][ T8609] block nbd1: NBD_DISCONNECT [ 85.745603][ T8608] nbd: nbd1 already in use [ 85.745629][ T8609] block nbd1: NBD_DISCONNECT [ 85.745831][ T8608] nbd: nbd1 already in use [ 85.745853][ T8609] block nbd1: NBD_DISCONNECT [ 85.746430][ T8609] block nbd1: NBD_DISCONNECT [ 85.746696][ T8608] nbd: nbd1 already in use [ 85.746757][ T8608] nbd: nbd1 already in use [ 85.746811][ T8608] nbd: nbd1 already in use [ 85.746869][ T8608] nbd: nbd1 already in use [ 85.746926][ T8608] nbd: nbd1 already in use [ 85.746984][ T8608] nbd: nbd1 already in use [ 85.747036][ T8608] nbd: nbd1 already in use [ 85.747089][ T8608] nbd: nbd1 already in use [ 85.747145][ T8608] nbd: nbd1 already in use [ 85.747198][ T8608] nbd: nbd1 already in use [ 85.747251][ T8608] nbd: nbd1 already in use [ 85.747304][ T8608] nbd: nbd1 already in use [ 85.747356][ T8608] nbd: nbd1 already in use [ 85.747409][ T8608] nbd: nbd1 already in use [ 85.747461][ T8608] nbd: nbd1 already in use [ 85.747514][ T8608] nbd: nbd1 already in use [ 85.747565][ T8608] nbd: nbd1 already in use [ 85.747617][ T8608] nbd: nbd1 already in use [ 85.747673][ T8608] nbd: nbd1 already in use [ 85.747725][ T8608] nbd: nbd1 already in use [ 85.747777][ T8608] nbd: nbd1 already in use [ 85.748635][ T8609] block nbd1: NBD_DISCONNECT [ 85.748847][ T8609] block nbd1: NBD_DISCONNECT [ 85.899636][ T8620] __nla_validate_parse: 124 callbacks suppressed [ 85.899650][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 85.910965][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.910974][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 85.910987][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 85.994458][ T8620] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 86.122272][ T8634] loop0: detected capacity change from 0 to 3904 [ 86.164522][ T8634] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 86.164538][ T8634] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 86.164565][ T8634] loop0: [ 86.250273][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 86.250288][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 86.273827][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.433766][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 86.434239][ T34] usb 5-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 86.434690][ T34] usb 5-1: config 0 has no interfaces? [ 86.436315][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.436338][ T34] usb 5-1: Product: syz [ 86.436353][ T34] usb 5-1: Manufacturer: syz [ 86.436367][ T34] usb 5-1: SerialNumber: syz [ 86.440150][ T34] usb 5-1: config 0 descriptor?? [ 86.609764][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz.1.836'. [ 86.609773][ T8663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.836'. [ 86.658083][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.660586][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.667588][ T8664] xt_policy: output policy not valid in PREROUTING and INPUT [ 86.718834][ T8664] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=243 sclass=netlink_xfrm_socket pid=8664 comm=syz.1.836 [ 87.137871][ T5192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 87.137893][ T5192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 87.137940][ T5192] loop0: [ 87.380546][ T5782] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 87.447144][ T8702] overlayfs: failed to resolve './file0': -2 [ 88.088928][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 88.088941][ T42] audit: type=1400 audit(1793024841.885:743): avc: denied { read } for pid=5785 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.088968][ T42] audit: type=1400 audit(1793024841.885:744): avc: denied { open } for pid=5785 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.088988][ T42] audit: type=1400 audit(1793024841.885:745): avc: denied { ioctl } for pid=5785 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.115330][ T42] audit: type=1400 audit(1793024841.925:746): avc: denied { write } for pid=8707 comm="syz.0.846" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.115813][ T8708] loop0: detected capacity change from 0 to 3904 [ 88.139775][ T42] audit: type=1400 audit(1793024841.945:747): avc: denied { read } for pid=5777 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 88.139806][ T42] audit: type=1400 audit(1793024841.945:748): avc: denied { open } for pid=5777 comm="syz-executor" path="/228/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 88.139828][ T42] audit: type=1804 audit(1793024841.945:749): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/228/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 88.139849][ T42] audit: type=1400 audit(1793024841.945:750): avc: denied { setattr } for pid=5777 comm="syz-executor" path="/228/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 88.142299][ T5192] udevd[5192]: could not touch /run/udev/queue: No such file or directory [ 88.142828][ T5192] udevd[5192]: could not touch /run/udev/queue: No such file or directory [ 88.151906][ T8708] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 88.151920][ T8708] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 88.151947][ T8708] loop0: [ 88.152450][ T5192] udevd[5192]: could not touch /run/udev/queue: No such file or directory [ 88.229900][ T42] audit: type=1400 audit(1793024842.035:751): avc: denied { write } for pid=8710 comm="syz.0.847" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 88.257613][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.848'. [ 88.259670][ T42] audit: type=1400 audit(1793024842.065:752): avc: denied { read } for pid=8712 comm="syz.4.848" dev="nsfs" ino=4026533006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.274098][ T8713] bond0: (slave bond_slave_0): Releasing backup interface [ 88.370438][ T8713] bond_slave_0: entered promiscuous mode [ 88.370460][ T8713] bond_slave_0: entered allmulticast mode [ 88.386370][ T8714] bond0: left promiscuous mode [ 88.387401][ T8720] batman_adv: batadv0: Adding interface: veth0 [ 88.387419][ T8720] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.387625][ T8720] batman_adv: batadv0: Interface activated: veth0 [ 88.388369][ T8723] batman_adv: batadv0: Interface deactivated: veth0 [ 88.388380][ T8723] batman_adv: batadv0: Removing interface: veth0 [ 88.547972][ T8738] FAULT_INJECTION: forcing a failure. [ 88.547972][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 88.548016][ T8738] CPU: 3 UID: 0 PID: 8738 Comm: syz.4.851 Tainted: G Y syzkaller #0 PREEMPT(full) [ 88.548031][ T8738] Tainted: [Y]=FORCED_BIND [ 88.548035][ T8738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.548042][ T8738] Call Trace: [ 88.548053][ T8738] [ 88.548058][ T8738] dump_stack_lvl+0x100/0x190 [ 88.548097][ T8738] should_fail_ex.cold+0x5/0xa [ 88.548120][ T8738] should_failslab+0xc2/0x120 [ 88.548148][ T8738] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.548168][ T8738] ? __kernfs_new_node+0xd2/0xa10 [ 88.548193][ T8738] __kernfs_new_node+0xd2/0xa10 [ 88.548218][ T8738] ? __pfx___kernfs_new_node+0x10/0x10 [ 88.548240][ T8738] ? lock_acquire+0x1d1/0x380 [ 88.548260][ T8738] ? kernfs_root+0x23/0x2a0 [ 88.548278][ T8738] ? find_held_lock+0x2b/0x80 [ 88.548295][ T8738] ? kernfs_root+0xee/0x2a0 [ 88.548311][ T8738] ? kernfs_root+0xee/0x2a0 [ 88.548333][ T8738] kernfs_new_node+0x194/0x200 [ 88.548355][ T8738] ? __pfx_kernfs_new_node+0x10/0x10 [ 88.548377][ T8738] ? kernfs_add_one+0x213/0xb40 [ 88.548402][ T8738] __kernfs_create_file+0x53/0x350 [ 88.548423][ T8738] sysfs_add_file_mode_ns+0x207/0x3c0 [ 88.548438][ T8738] internal_create_group+0x593/0xfb0 [ 88.548454][ T8738] ? __pfx_internal_create_group+0x10/0x10 [ 88.548469][ T8738] ? kernfs_create_link+0x1f1/0x280 [ 88.548487][ T8738] internal_create_groups+0x9d/0x150 [ 88.548501][ T8738] device_add+0x71a/0x1970 [ 88.548523][ T8738] ? __pfx_device_add+0x10/0x10 [ 88.548538][ T8738] ? lockdep_init_map_type+0x5c/0x250 [ 88.548560][ T8738] ? __init_waitqueue_head+0xca/0x150 [ 88.548592][ T8738] rfkill_register+0x1ad/0xb30 [ 88.548621][ T8738] nfc_register_device+0x11f/0x3e0 [ 88.548640][ T8738] nci_register_device+0x7f1/0xb80 [ 88.548657][ T8738] ? __pfx_nci_register_device+0x10/0x10 [ 88.548683][ T8738] ? lockdep_init_map_type+0x5c/0x250 [ 88.548709][ T8738] virtual_ncidev_open+0x141/0x220 [ 88.548734][ T8738] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 88.548762][ T8738] misc_open+0x26d/0x450 [ 88.548784][ T8738] ? __pfx_misc_open+0x10/0x10 [ 88.548805][ T8738] chrdev_open+0x234/0x6a0 [ 88.548825][ T8738] ? __pfx_chrdev_open+0x10/0x10 [ 88.548842][ T8738] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 88.548863][ T8738] do_dentry_open+0x674/0x1470 [ 88.548878][ T8738] ? __pfx_chrdev_open+0x10/0x10 [ 88.548896][ T8738] vfs_open_consume+0xcc/0x460 [ 88.548909][ T8738] path_openat+0x1547/0x23f0 [ 88.548928][ T8738] ? __pfx_path_openat+0x10/0x10 [ 88.548948][ T8738] do_file_open+0x20e/0x430 [ 88.548966][ T8738] ? __pfx_do_file_open+0x10/0x10 [ 88.548992][ T8738] ? _raw_spin_unlock+0x28/0x50 [ 88.549005][ T8738] ? alloc_fd+0x471/0x7a0 [ 88.549026][ T8738] do_sys_openat2+0x163/0x1d0 [ 88.549036][ T8738] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.549052][ T8738] __x64_sys_openat+0x12d/0x210 [ 88.549063][ T8738] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.549080][ T8738] do_syscall_64+0x123/0x790 [ 88.549097][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.549109][ T8738] RIP: 0033:0x7f2cb0d9f559 [ 88.549119][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.549129][ T8738] RSP: 002b:00007f2cb1b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.549150][ T8738] RAX: ffffffffffffffda RBX: 00007f2cb1026090 RCX: 00007f2cb0d9f559 [ 88.549156][ T8738] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 88.549163][ T8738] RBP: 00007f2cb0e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 88.549169][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.549176][ T8738] R13: 00007f2cb1026128 R14: 00007f2cb1026090 R15: 00007ffc943cc478 [ 88.549201][ T8738] [ 88.788866][ T8752] loop0: detected capacity change from 0 to 3904 [ 88.865561][ T8752] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 88.865577][ T8752] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 88.865602][ T8752] loop0: [ 88.947754][ T8757] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 89.007510][ T8762] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.008616][ T8762] ip_tables: iptables: counters copy to user failed while replacing table [ 89.192647][ T8777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 89.192667][ T8777] block nbd0: not configured, cannot reconfigure [ 89.886038][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.886249][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.119372][ T8788] rdma_rxe: rxe_newlink: failed to add wg0 [ 90.525636][ T8790] loop0: detected capacity change from 0 to 3904 [ 90.575289][ T8790] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 90.575373][ T8790] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 90.575416][ T8790] loop0: [ 90.789605][ T8798] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 91.077785][ T8812] loop0: detected capacity change from 0 to 3904 [ 91.077951][ T8813] netlink: 56 bytes leftover after parsing attributes in process `syz.4.872'. [ 91.126254][ T8811] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 91.126270][ T8811] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 91.126296][ T8811] loop0: [ 92.854389][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.011669][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 93.026280][ T8831] FAULT_INJECTION: forcing a failure. [ 93.026280][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 93.026297][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.4.877 Tainted: G Y syzkaller #0 PREEMPT(full) [ 93.026312][ T8831] Tainted: [Y]=FORCED_BIND [ 93.026316][ T8831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.026323][ T8831] Call Trace: [ 93.026327][ T8831] [ 93.026331][ T8831] dump_stack_lvl+0x100/0x190 [ 93.026353][ T8831] should_fail_ex.cold+0x5/0xa [ 93.026369][ T8831] should_failslab+0xc2/0x120 [ 93.026385][ T8831] __kvmalloc_node_noprof+0x113/0x9b0 [ 93.026400][ T8831] ? do_replace_table+0x1c5/0x750 [ 93.026421][ T8831] do_replace_table+0x1c5/0x750 [ 93.026449][ T8831] xt_register_table+0x384/0x9a0 [ 93.026469][ T8831] ? __pfx_xt_register_table+0x10/0x10 [ 93.026486][ T8831] ? xt_alloc_table_info+0x44/0xa0 [ 93.026502][ T8831] ? __asan_memset+0x23/0x50 [ 93.026515][ T8831] ipt_register_table+0x137/0x2b0 [ 93.026528][ T8831] ? __pfx_ipt_register_table+0x10/0x10 [ 93.026538][ T8831] ? __kmalloc_noprof+0x350/0x840 [ 93.026554][ T8831] ? ipt_alloc_initial_table+0x5b8/0x700 [ 93.026573][ T8831] iptable_nat_table_init+0x4b/0x270 [ 93.026587][ T8831] xt_find_table_lock+0x2db/0x520 [ 93.026606][ T8831] xt_request_find_table_lock+0x28/0xf0 [ 93.026623][ T8831] get_info+0x1a7/0x790 [ 93.026634][ T8831] ? avc_has_perm_noaudit+0x145/0x470 [ 93.026648][ T8831] ? __pfx_get_info+0x10/0x10 [ 93.026659][ T8831] ? cred_has_capability.isra.0+0x186/0x300 [ 93.026673][ T8831] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 93.026688][ T8831] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 93.026702][ T8831] ? hook_capable+0x1bc/0x500 [ 93.026719][ T8831] ? rcu_is_watching+0x13/0xc0 [ 93.026730][ T8831] ? cap_capable+0x107/0x430 [ 93.026746][ T8831] ? bpf_lsm_capable+0x9/0x10 [ 93.026760][ T8831] ? security_capable+0x80/0x260 [ 93.026777][ T8831] do_ipt_get_ctl+0x231/0xbf0 [ 93.026788][ T8831] ? __mutex_unlock_slowpath+0x35d/0x930 [ 93.026805][ T8831] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 93.026816][ T8831] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.026834][ T8831] ? lock_acquire+0x1d1/0x380 [ 93.026847][ T8831] ? __might_fault+0xc5/0x140 [ 93.026870][ T8831] ? nf_sockopt_find.isra.0+0x222/0x290 [ 93.026886][ T8831] nf_getsockopt+0x7c/0xe0 [ 93.026900][ T8831] ip_getsockopt+0x192/0x1e0 [ 93.026912][ T8831] ? __pfx_ip_getsockopt+0x10/0x10 [ 93.026927][ T8831] sctp_getsockopt+0x19b/0x7160 [ 93.026944][ T8831] ? avc_has_perm_noaudit+0x56/0x470 [ 93.026958][ T8831] ? find_held_lock+0x2b/0x80 [ 93.026968][ T8831] ? avc_has_perm_noaudit+0x11e/0x470 [ 93.026981][ T8831] ? avc_has_perm_noaudit+0x11e/0x470 [ 93.026995][ T8831] ? __pfx_sctp_getsockopt+0x10/0x10 [ 93.027014][ T8831] ? __lock_acquire+0x5c0/0x1f40 [ 93.027027][ T8831] ? avc_has_perm+0x135/0x1e0 [ 93.027041][ T8831] ? __pfx_avc_has_perm+0x10/0x10 [ 93.027053][ T8831] ? futex_unqueue+0x13d/0x2c0 [ 93.027066][ T8831] ? lock_acquire+0x1d1/0x380 [ 93.027078][ T8831] ? __might_fault+0xc5/0x140 [ 93.027095][ T8831] ? find_held_lock+0x2b/0x80 [ 93.027105][ T8831] ? __might_fault+0xc5/0x140 [ 93.027121][ T8831] ? __might_fault+0xc5/0x140 [ 93.027141][ T8831] ? _copy_from_user+0x59/0xd0 [ 93.027156][ T8831] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 93.027170][ T8831] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 93.027186][ T8831] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 93.027199][ T8831] do_sock_getsockopt+0x415/0x570 [ 93.027217][ T8831] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 93.027237][ T8831] ? __fget_files+0x34/0x3d0 [ 93.027254][ T8831] ? find_held_lock+0x2b/0x80 [ 93.027268][ T8831] ? __fget_files+0x21f/0x3d0 [ 93.027287][ T8831] __sys_getsockopt+0x148/0x260 [ 93.027308][ T8831] ? __x64_sys_getsockopt+0xbd/0x160 [ 93.027324][ T8831] __x64_sys_getsockopt+0xbd/0x160 [ 93.027340][ T8831] ? do_syscall_64+0xae/0x790 [ 93.027355][ T8831] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.027370][ T8831] do_syscall_64+0x123/0x790 [ 93.027387][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.027398][ T8831] RIP: 0033:0x7f2cb0d9f559 [ 93.027408][ T8831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.027418][ T8831] RSP: 002b:00007f2cb1b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.027429][ T8831] RAX: ffffffffffffffda RBX: 00007f2cb1026090 RCX: 00007f2cb0d9f559 [ 93.027436][ T8831] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 93.027442][ T8831] RBP: 00007f2cb0e36b20 R08: 00002000000000c0 R09: 0000000000000000 [ 93.027449][ T8831] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 93.027455][ T8831] R13: 00007f2cb1026128 R14: 00007f2cb1026090 R15: 00007ffc943cc478 [ 93.027470][ T8831] [ 93.028659][ T8830] /dev/sg0: Can't lookup blockdev [ 93.262472][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 93.262489][ T42] audit: type=1400 audit(1793024847.065:766): avc: denied { watch } for pid=8841 comm="syz.0.881" path="/248" dev="tmpfs" ino=1351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.320113][ T8844] veth2: entered promiscuous mode [ 93.320133][ T8844] veth2: entered allmulticast mode [ 93.352751][ T6966] Process accounting resumed [ 93.369234][ T8844] Process accounting resumed [ 93.394512][ T8846] loop0: detected capacity change from 0 to 3904 [ 93.488628][ T8846] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 93.488644][ T8846] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 93.488672][ T8846] loop0: [ 93.591638][ T8851] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 93.604484][ T1966] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 93.617146][ T8851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.626817][ T8851] jffs2: notice: (8851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 93.710503][ T8856] [ 93.711331][ T8856] ============================================ [ 93.713282][ T8856] WARNING: possible recursive locking detected [ 93.715234][ T8856] syzkaller #0 Tainted: G Y [ 93.717309][ T8856] -------------------------------------------- [ 93.719497][ T8856] syz.0.886/8856 is trying to acquire lock: [ 93.721434][ T8856] ffff88802b571368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 93.724769][ T8856] [ 93.724769][ T8856] but task is already holding lock: [ 93.727106][ T8856] ffff88802b571368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 93.730412][ T8856] [ 93.730412][ T8856] other info that might help us debug this: [ 93.732915][ T8856] Possible unsafe locking scenario: [ 93.732915][ T8856] [ 93.735396][ T8856] CPU0 [ 93.736473][ T8856] ---- [ 93.737555][ T8856] lock(&sb->s_type->i_mutex_key#9); [ 93.739282][ T8856] lock(&sb->s_type->i_mutex_key#9); [ 93.741404][ T8856] [ 93.741404][ T8856] *** DEADLOCK *** [ 93.741404][ T8856] [ 93.744580][ T8856] May be due to missing lock nesting notation [ 93.744580][ T8856] [ 93.747814][ T8856] locks held by syz.0.886/8856: 1, last CPU#1: [ 93.750251][ T8856] #0: ffff88802b571368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 93.754490][ T8856] [ 93.754490][ T8856] stack backtrace: [ 93.756525][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.0.886 Tainted: G Y syzkaller #0 PREEMPT(full) [ 93.759867][ T8856] Tainted: [Y]=FORCED_BIND [ 93.761262][ T8856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.764413][ T8856] Call Trace: [ 93.765498][ T8856] [ 93.766455][ T8856] dump_stack_lvl+0x100/0x190 [ 93.767947][ T8856] print_deadlock_bug.cold+0xbd/0xca [ 93.769623][ T8856] __lock_acquire+0x13f4/0x1f40 [ 93.771166][ T8856] lock_acquire+0x1d1/0x380 [ 93.772543][ T8856] ? blkdev_write_iter+0xd12/0x11d0 [ 93.774150][ T8856] ? __pfx___might_resched+0x10/0x10 [ 93.775862][ T8856] down_read+0x94/0x4c0 [ 93.777170][ T8856] ? blkdev_write_iter+0xd12/0x11d0 [ 93.778814][ T8856] ? __pfx_down_read+0x10/0x10 [ 93.780234][ T8856] ? filemap_check_errors+0xa9/0x150 [ 93.781818][ T8856] blkdev_write_iter+0xd12/0x11d0 [ 93.783364][ T8856] vfs_write+0x6af/0x1050 [ 93.784732][ T8856] ? __pfx_blkdev_write_iter+0x10/0x10 [ 93.786473][ T8856] ? __pfx_vfs_write+0x10/0x10 [ 93.788000][ T8856] ? find_held_lock+0x2b/0x80 [ 93.789528][ T8856] ksys_write+0x12a/0x250 [ 93.790843][ T8856] ? __pfx_ksys_write+0x10/0x10 [ 93.792343][ T8856] do_syscall_64+0x123/0x790 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.793783][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.795805][ T8856] RIP: 0033:0x7f41d539f559 [ 93.797191][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.803027][ T8856] RSP: 002b:00007f41d61bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.805619][ T8856] RAX: ffffffffffffffda RBX: 00007f41d5625fa0 RCX: 00007f41d539f559 [ 93.808075][ T8856] RDX: 00000000fffffe38 RSI: 0000200000000a80 RDI: 0000000000000048 [ 93.810455][ T8856] RBP: 00007f41d5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.812752][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.815096][ T8856] R13: 00007f41d5626038 R14: 00007f41d5625fa0 R15: 00007ffd00e38ad8 [ 93.817587][ T8856] [ 93.844666][ T1966] usb 9-1: Using ep0 maxpacket: 8 [ 93.849236][ T1966] usb 9-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 93.850555][ T1966] usb 9-1: config 0 has no interfaces? [ 93.866921][ T7423] sctp: sctp_close: sk:ffff888057c7dc80, timeout:0 [ 93.866940][ T7423] sctp: sctp_do_sm[pre-fn]: ep:ffff8880411b4800, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff88802683a000[STATE_COOKIE_ECHOED], sctp_sf_cookie_echoed_prm_shutdown [ 93.866955][ T7423] sctp: sctp_do_sm[post-fn]: asoc:ffff88802683a000, status:DISPOSITION_DELETE_TCB [ 93.866966][ T7423] sctp: sctp_cmd_new_state: asoc:ffff88802683a000[STATE_CLOSED] [ 93.867031][ T7423] sctp: sctp_packet_free: packet:ffff88803c486b08 [ 93.867045][ T7423] sctp: sctp_packet_free: packet:ffff888028134308 [ 93.867057][ T7423] sctp: sctp_packet_free: packet:ffff888028134b08 [ 93.867073][ T7423] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 93.867083][ T7423] sctp: sctp_destroy_sock: sk:ffff888057c7dc80 [ 93.868473][ T7338] sctp: sctp_close: sk:ffff888057c7ef00, timeout:0 [ 93.868488][ T7338] sctp: sctp_do_sm[pre-fn]: ep:ffff88802538dc00, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff888029ff2000[STATE_COOKIE_ECHOED], sctp_sf_cookie_echoed_prm_shutdown [ 93.868504][ T7338] sctp: sctp_do_sm[post-fn]: asoc:ffff888029ff2000, status:DISPOSITION_DELETE_TCB [ 93.868515][ T7338] sctp: sctp_cmd_new_state: asoc:ffff888029ff2000[STATE_CLOSED] [ 93.868586][ T7338] sctp: sctp_packet_free: packet:ffff8880306d4b08 [ 93.868599][ T7338] sctp: sctp_packet_free: packet:ffff888032221b08 [ 93.868611][ T7338] sctp: sctp_packet_free: packet:ffff888032222308 [ 93.868627][ T7338] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 93.868637][ T7338] sctp: sctp_destroy_sock: sk:ffff888057c7ef00 [ 93.874050][ T7676] sctp: sctp_close: sk:ffff88803296b780, timeout:0 [ 93.874065][ T7676] sctp: sctp_do_sm[pre-fn]: ep:ffff88803c6f5400, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff88805960c000[STATE_COOKIE_ECHOED], sctp_sf_cookie_echoed_prm_shutdown [ 93.874080][ T7676] sctp: sctp_do_sm[post-fn]: asoc:ffff88805960c000, status:DISPOSITION_DELETE_TCB [ 93.874090][ T7676] sctp: sctp_cmd_new_state: asoc:ffff88805960c000[STATE_CLOSED] [ 93.874444][ T7676] sctp: sctp_packet_free: packet:ffff8880261edb08 [ 93.874460][ T7676] sctp: sctp_packet_free: packet:ffff88803c662308 [ 93.874472][ T7676] sctp: sctp_packet_free: packet:ffff88803c661b08 [ 93.874494][ T7676] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 93.874504][ T7676] sctp: sctp_destroy_sock: sk:ffff88803296b780 [ 93.880829][ T7489] sctp: sctp_close: sk:ffff88805d5cc0c0, timeout:0 [ 93.880846][ T7489] sctp: sctp_do_sm[pre-fn]: ep:ffff888057909800, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff88802b00a000[STATE_COOKIE_ECHOED], sctp_sf_cookie_echoed_prm_shutdown [ 93.880860][ T7489] sctp: sctp_do_sm[post-fn]: asoc:ffff88802b00a000, status:DISPOSITION_DELETE_TCB [ 93.880871][ T7489] sctp: sctp_cmd_new_state: asoc:ffff88802b00a000[STATE_CLOSED] [ 93.880942][ T7489] sctp: sctp_packet_free: packet:ffff888058e04308 [ 93.880956][ T7489] sctp: sctp_packet_free: packet:ffff888056f03308 [ 93.883512][ T7489] sctp: sctp_packet_free: packet:ffff888037cea308 [ 93.883544][ T7489] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 93.883554][ T7489] sctp: sctp_destroy_sock: sk:ffff88805d5cc0c0 [ 94.275034][ T1966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.275050][ T1966] usb 9-1: Product: syz [ 94.275057][ T1966] usb 9-1: Manufacturer: syz [ 94.275126][ T7009] sctp: sctp_close: sk:ffff888058dadc80, timeout:0 [ 94.275151][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888028abc000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275225][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888030956000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275291][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88805949c000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275356][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88802893a000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275424][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88802bb16000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275483][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88810db98000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275565][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888040170000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275625][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888039370000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275684][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88805884e000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275756][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888028502000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.275816][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888037b30000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.277635][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff8880367d6000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.277751][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888058366000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.277822][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88802a516000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.277881][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88805d4c8000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.277977][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888036fc4000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278016][ T1966] usb 9-1: config 0 descriptor?? [ 94.278072][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888030582000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278139][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888035484000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278195][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888057f52000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278231][ T1966] usb 9-1: can't set config #0, error -71 [ 94.278255][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88810eda4000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278322][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888037414000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278380][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff8880582b6000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278446][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff888039172000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278506][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88810545c000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278540][ T1966] usb 9-1: USB disconnect, device number 2 [ 94.278572][ T7009] sctp: sctp_assoc_rwnd_increase: asoc:ffff88810797a000 rwnd increased by 1 to (106496, 0) - 106495 [ 94.278665][ T7009] sctp: sctp_do_sm[pre-fn]: ep:ffff888038921800, EVENT_T_PRIMITIVE, PRIMITIVE_ABORT, asoc:ffff888058b04000[STATE_COOKIE_ECHOED], sctp_sf_cookie_echoed_prm_abort [ 94.278690][ T7009] sctp: sctp_do_sm[post-fn]: asoc:ffff888058b04000, status:DISPOSITION_ABORT [ 94.278709][ T7009] sctp: sctp_outq_tail: outq:ffff888058b047e0, chunk:ffff88805fecbb80[ABORT] [ 94.278731][ T7009] sctp: sctp_cmd_new_state: asoc:ffff888058b04000[STATE_CLOSED] [ 94.279018][ T7009] sctp: sctp_cmd_interpreter: sm_sideff: event_up:ffff888038806f28, ulpq:ffff888058b04850 [ 94.279055][ T7009] sctp: sctp_cmd_new_state: asoc:ffff888058b04000[STATE_CLOSED] [ 94.279073][ T7009] sctp: sctp_packet_config: packet:ffff88805cac5b08 vtag:0x31829221 [ 94.279100][ T7009] sctp: sctp_v4_get_dst: dst:10.0.2.15, src:0.0.0.0 - [ 94.279151][ T7009] sctp: rt_dst:10.0.2.15, rt_src:10.0.2.15 [ 94.279177][ T7009] sctp: sctp_v4_get_dst: dst:10.0.2.15, src:10.0.2.15 - [ 94.279252][ T7009] sctp: rt_dst:10.0.2.15, rt_src:10.0.2.15 [ 94.279269][ T7009] sctp: sctp_assoc_set_pmtu: asoc:ffff888058b04000, pmtu:65532, frag_point:65464 [ 94.279289][ T7009] sctp: sctp_packet_transmit_chunk: packet:ffff88805cac5b08 size:52 chunk:ffff88805fecbb80 size:8 [ 94.279307][ T7009] sctp: sctp_packet_append_chunk: packet:ffff88805cac5b08 chunk:ffff88805fecbb80 [ 94.279323][ T7009] sctp: sctp_packet_transmit: packet:ffff88805cac5b08 [ 94.279353][ T7009] sctp: *** Chunk:ffff88805fecbb80[ABORT] No TSN 0x0, length:8, chunk->skb->len:8, rtt_in_progress:0 [ 94.279401][ T7009] sctp: ***sctp_transmit_packet*** skb->len:20 [ 94.279413][ T7009] sctp: sctp_v4_xmit: skb:ffff888038807040, len:20, src:10.0.2.15, dst:10.0.2.15 [ 94.279647][ T7009] sctp: sctp_packet_free: packet:ffff88805b361308 [ 94.279669][ T7009] sctp: sctp_packet_free: packet:ffff88805b360b08 [ 94.279699][ T7009] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 94.279781][ T7009] sctp: sctp_packet_free: packet:ffff88805cac5b08 [ 94.279823][ T7009] sctp: sctp_destroy_sock: sk:ffff888058dadc80 [ 94.286846][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.286865][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.319754][ T929] usb 5-1: USB disconnect, device number 6 [ 94.350840][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.350870][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.469081][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.469111][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.507914][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.507948][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.589618][ T13] bridge_slave_1: left allmulticast mode [ 94.589667][ T13] bridge_slave_1: left promiscuous mode [ 94.589782][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.590820][ T13] bridge_slave_0: left allmulticast mode [ 94.590838][ T13] bridge_slave_0: left promiscuous mode [ 94.590946][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.637585][ T13] bond3 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 94.637809][ T13] bond3 (unregistering): (slave ip6gretap0): Releasing backup interface [ 94.672555][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.679698][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.682736][ T13] bond0 (unregistering): Released all slaves [ 94.690222][ T13] bond1 (unregistering): Released all slaves [ 94.697911][ T13] bond2 (unregistering): Released all slaves [ 94.701573][ T13] bond3 (unregistering): Released all slaves [ 94.724395][ T5495] 8021q: adding VLAN 0 to HW filter on device eth6 [ 94.735060][ T5495] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.746834][ T5495] 8021q: adding VLAN 0 to HW filter on device eth8 [ 94.757818][ T5495] 8021q: adding VLAN 0 to HW filter on device eth9 [ 94.772493][ T13] tipc: Disabling bearer [ 94.776977][ T13] tipc: Left network mode [ 94.785729][ T13] IPVS: stopping backup sync thread 5949 ... [ 94.888449][ T13] hsr_slave_0: left promiscuous mode [ 94.888909][ T13] hsr_slave_1: left promiscuous mode [ 94.889275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.889288][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.889719][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.889733][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.891557][ T13] veth1_macvtap: left promiscuous mode [ 94.891579][ T13] veth0_macvtap: left promiscuous mode [ 94.891626][ T13] veth1_vlan: left promiscuous mode [ 94.977373][ T13] team0 (unregistering): Port device vlan0 removed [ 94.990675][ T13] team0 (unregistering): Port device team_slave_1 removed [ 94.993939][ T13] team0 (unregistering): Port device team_slave_0 removed [ 95.244764][ T13] sctp: sctp_close: sk:ffff88803296dc80, timeout:0 [ 95.244784][ T13] sctp: sctp_destroy_sock: sk:ffff88803296dc80 [ 96.148935][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.196155][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.246461][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.296507][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.381530][ T12] bridge_slave_1: left allmulticast mode [ 96.381545][ T12] bridge_slave_1: left promiscuous mode [ 96.381610][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.382252][ T12] bridge_slave_0: left allmulticast mode [ 96.382264][ T12] bridge_slave_0: left promiscuous mode [ 96.382323][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.431139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.431728][ T12] bond0 (unregistering): Released all slaves [ 96.437153][ T12] bond1 (unregistering): Released all slaves [ 96.442539][ T12] bond2 (unregistering): Released all slaves [ 96.456481][ T5495] 8021q: adding VLAN 0 to HW filter on device eth10 [ 96.468164][ T5495] 8021q: adding VLAN 0 to HW filter on device eth11 [ 96.479526][ T5495] 8021q: adding VLAN 0 to HW filter on device eth12 [ 96.494390][ T5495] 8021q: adding VLAN 0 to HW filter on device eth13 [ 96.716291][ T12] hsr_slave_0: left promiscuous mode [ 96.716767][ T12] hsr_slave_1: left promiscuous mode [ 96.716978][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.716992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.717273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.717282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.719042][ T12] veth1_macvtap: left promiscuous mode [ 96.719063][ T12] veth0_macvtap: left promiscuous mode [ 96.719111][ T12] veth1_vlan: left promiscuous mode [ 96.719137][ T12] veth0_vlan: left promiscuous mode [ 96.803344][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.808180][ T12] team0 (unregistering): Port device team_slave_0 removed [ 96.864049][ T113] smbdirect: ib_dev[syz0] removed [ 96.866894][ T34] infiniband syz0: ib_query_port failed (-19) [ 97.454055][ T12] sctp: sctp_close: sk:ffff888057c79bc0, timeout:0 [ 97.454075][ T12] sctp: sctp_destroy_sock: sk:ffff888057c79bc0